# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 30.07.2020 17:52:55.490 Process: id = "1" image_name = "cuserstestappdatalocaltemprar$exb6200.3208333.exe" filename = "c:\\users\\fd1hvy\\desktop\\cuserstestappdatalocaltemprar$exb6200.3208333.exe" page_root = "0x4445000" os_pid = "0x6d0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x115c [0099.198] LocalAlloc (uFlags=0x0, uBytes=0xa8) returned 0xba0fd8 [0099.208] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0099.210] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77970000 [0099.216] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x7dfca0 | out: Wow64Process=0x7dfca0) returned 1 [0099.220] IsDebuggerPresent () returned 0 [0099.220] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x7dfb7c | out: pbDebuggerPresent=0x7dfb7c) returned 1 [0099.978] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x7df84c, ProcessInformationLength=0x8, ReturnLength=0x7dfc4c | out: ProcessInformation=0x7df84c, ReturnLength=0x7dfc4c) returned 0xc0000353 [0099.983] NtSetInformationThread (ThreadHandle=0xfffffffffffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0099.984] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x7dfc5c, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x7dfc5c, ResultLength=0x0) returned 0x0 [0099.984] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x7dfc6c, Length=0x0, ResultLength=0x7dfc54 | out: SystemInformation=0x7dfc6c, ResultLength=0x7dfc54*=0xa0e0) returned 0xc0000004 [0099.984] LocalAlloc (uFlags=0x0, uBytes=0x141c0) returned 0xbaea48 [0099.985] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0xbaea48, Length=0x141c0, ResultLength=0x0 | out: SystemInformation=0xbaea48, ResultLength=0x0) returned 0x0 [0100.066] LocalFree (hMem=0xbaea48) returned 0x0 [0100.143] GetModuleFileNameW (in: hModule=0x60000, lpFilename=0x7df894, nSize=0xfe | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cuserstestappdatalocaltemprar$exb6200.3208333.exe")) returned 0x49 [0100.144] NtOpenFile (in: FileHandle=0x7df848, DesiredAccess=0x80100080, ObjectAttributes=0x7df810*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe", Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x7df838, ShareAccess=0x3, OpenOptions=0x60 | out: FileHandle=0x7df848*=0x1d0, IoStatusBlock=0x7df838*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0100.146] NtCreateSection (in: SectionHandle=0x7df844, DesiredAccess=0x4, ObjectAttributes=0x7df810*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x1d0 | out: SectionHandle=0x7df844*=0x1d4) returned 0x0 [0100.147] NtMapViewOfSection (in: SectionHandle=0x1d4, ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df838*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x7dfb4800000000, ViewSize=0x7df830*=0x0, InheritDisposition=0x100000000, AllocationType=0x0, AccessProtection=0x0 | out: BaseAddress=0x7df838*=0x0, SectionOffset=0x7dfb4800000000, ViewSize=0x7df830*=0x0) returned 0xc00000f6 [0100.147] NtClose (Handle=0x1d4) returned 0x0 [0100.147] NtClose (Handle=0x1d0) returned 0x0 [0100.148] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df84c*=0x7f000, NumberOfBytesToProtect=0x7df844, NewAccessProtection=0x40, OldAccessProtection=0x7dfb74 | out: BaseAddress=0x7df84c*=0x7f000, NumberOfBytesToProtect=0x7df844, OldAccessProtection=0x7dfb74*=0x20) returned 0x0 [0100.269] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df84c*=0x75000, NumberOfBytesToProtect=0x7df844, NewAccessProtection=0x4, OldAccessProtection=0x7dfb74 | out: BaseAddress=0x7df84c*=0x75000, NumberOfBytesToProtect=0x7df844, OldAccessProtection=0x7dfb74*=0x2) returned 0x0 [0100.270] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df84c*=0xa4000, NumberOfBytesToProtect=0x7df844, NewAccessProtection=0x4, OldAccessProtection=0x7dfb74 | out: BaseAddress=0x7df84c*=0xa4000, NumberOfBytesToProtect=0x7df844, OldAccessProtection=0x7dfb74*=0x80) returned 0x0 [0100.271] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x772d0000 [0100.275] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.278] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.278] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.278] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.285] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.285] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.286] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.288] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.290] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x750c0000 [0100.292] GetModuleHandleA (lpModuleName="GDI32.dll") returned 0x74910000 [0100.293] GetModuleHandleA (lpModuleName="SHELL32.dll") returned 0x75760000 [0100.294] GetModuleHandleA (lpModuleName="WTSAPI32.dll") returned 0x742d0000 [0100.294] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x772d0000 [0100.311] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.311] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.312] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.313] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.320] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.323] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.324] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77970000 [0100.326] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x750c0000 [0100.327] CloseHandle (hObject=0xdeadc0de) returned 0 [0100.452] VirtualQuery (in: lpAddress=0x40b81c, lpBuffer=0x7de7f8, dwLength=0x1c | out: lpBuffer=0x7de7f8*(BaseAddress=0x40b000, AllocationBase=0x60000, AllocationProtect=0x80, RegionSize=0x215000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0100.588] RtlUnwind (TargetFrame=0x7dfcd4, TargetIp=0x9c3fc, ExceptionRecord=0x0, ReturnValue=0x0) [0100.589] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xba0fd8, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x7df820, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x7df820*(BaseAddress=0xba0000, AllocationBase=0x0, AllocationProtect=0xb90000, RegionSize=0x0, State=0x4, Protect=0xffff9302, Type=0x24000), ResultLength=0x0) returned 0x0 [0100.590] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0x625000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x7df820, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x7df820*(BaseAddress=0x625000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x0, State=0x0, Protect=0xffff9302, Type=0x2b000), ResultLength=0x0) returned 0x0 [0101.574] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x7dfc28, lpSystemAffinityMask=0x7dfc68 | out: lpProcessAffinityMask=0x7dfc28, lpSystemAffinityMask=0x7dfc68) returned 1 [0102.056] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0102.056] Sleep (dwMilliseconds=0x0) [0102.089] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0102.089] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x2) returned 0x0 [0102.090] Sleep (dwMilliseconds=0x0) [0102.093] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0102.093] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x4) returned 0x0 [0102.094] Sleep (dwMilliseconds=0x0) [0102.096] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0102.097] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x8) returned 0x0 [0102.097] Sleep (dwMilliseconds=0x0) [0102.097] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0102.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x7de724 | out: lpSystemTimeAsFileTime=0x7de724*(dwLowDateTime=0x7c9b3834, dwHighDateTime=0x1d6669a)) [0102.536] GetCurrentProcessId () returned 0x6d0 [0102.846] GetCurrentThreadId () returned 0x115c [0103.068] GetTickCount () returned 0x115ad15 [0103.264] QueryPerformanceCounter (in: lpPerformanceCount=0x7de71c | out: lpPerformanceCount=0x7de71c*=19868483879) returned 1 [0104.057] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x27e0000 [0105.083] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0105.191] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0 [0105.191] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20 [0105.191] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40 [0105.191] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00 [0105.372] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0105.606] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0106.346] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0106.346] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0106.346] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0106.346] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0106.347] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0106.347] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0106.347] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0106.347] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0106.347] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0106.348] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0106.348] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0106.348] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0107.075] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0107.604] GetProcAddress (hModule=0x772d0000, lpProcName="DecodePointer") returned 0x779d1ec0 [0108.551] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x214) returned 0x27e05a8 [0108.573] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0108.573] GetProcAddress (hModule=0x772d0000, lpProcName="DecodePointer") returned 0x779d1ec0 [0109.820] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0109.836] GetProcAddress (hModule=0x772d0000, lpProcName="EncodePointer") returned 0x779d29e0 [0109.837] GetProcAddress (hModule=0x772d0000, lpProcName="DecodePointer") returned 0x779d1ec0 [0111.714] GetCurrentThreadId () returned 0x115c [0111.984] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe\" " [0112.255] GetEnvironmentStringsW () returned 0xbacc30* [0112.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0112.818] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x565) returned 0x27e07c8 [0112.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x27e07c8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0113.169] FreeEnvironmentStringsW (penv=0xbacc30) returned 1 [0113.412] GetStartupInfoA (in: lpStartupInfo=0x7de674 | out: lpStartupInfo=0x7de674*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0113.412] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x800) returned 0x27e0d38 [0114.542] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0114.542] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0114.542] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0115.023] SetHandleCount (uNumber=0x20) returned 0x20 [0115.318] GetLastError () returned 0x0 [0115.560] SetLastError (dwErrCode=0x0) [0115.560] GetLastError () returned 0x0 [0115.561] SetLastError (dwErrCode=0x0) [0115.655] GetLastError () returned 0x0 [0115.655] SetLastError (dwErrCode=0x0) [0116.030] GetACP () returned 0x4e4 [0116.030] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x220) returned 0x27e1540 [0116.030] GetLastError () returned 0x0 [0116.030] SetLastError (dwErrCode=0x0) [0116.170] IsValidCodePage (CodePage=0x4e4) returned 1 [0116.342] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x7de654 | out: lpCPInfo=0x7de654) returned 1 [0116.357] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x7de120 | out: lpCPInfo=0x7de120) returned 1 [0116.357] GetLastError () returned 0x0 [0116.357] SetLastError (dwErrCode=0x0) [0116.498] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x7de0b0 | out: lpCharType=0x7de0b0) returned 1 [0116.499] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7de534, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0116.499] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7de534, cbMultiByte=256, lpWideCharStr=0x7dde98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0116.576] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x7de134 | out: lpCharType=0x7de134) returned 1 [0116.577] GetLastError () returned 0x0 [0116.577] SetLastError (dwErrCode=0x0) [0116.655] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0116.655] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7de534, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0116.655] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7de534, cbMultiByte=256, lpWideCharStr=0x7dde68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쬱쿐攺\x09Ā") returned 256 [0116.823] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쬱쿐攺\x09Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0117.124] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쬱쿐攺\x09Ā", cchSrc=256, lpDestStr=0x7ddc58, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0117.186] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x7de434, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ,\x03dÜlæ}", lpUsedDefaultChar=0x0) returned 256 [0117.186] GetLastError () returned 0x0 [0117.186] SetLastError (dwErrCode=0x0) [0117.186] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7de534, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0117.186] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7de534, cbMultiByte=256, lpWideCharStr=0x7dde88, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쬱쿐攺\x09Ā") returned 256 [0117.186] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쬱쿐攺\x09Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0117.186] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쬱쿐攺\x09Ā", cchSrc=256, lpDestStr=0x7ddc78, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0117.186] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x7de334, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ,\x03dÜlæ}", lpUsedDefaultChar=0x0) returned 256 [0117.685] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xa7528, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cuserstestappdatalocaltemprar$exb6200.3208333.exe")) returned 0x49 [0117.685] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.686] SetLastError (dwErrCode=0x0) [0117.686] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.687] SetLastError (dwErrCode=0x0) [0117.687] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.688] SetLastError (dwErrCode=0x0) [0117.688] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.689] SetLastError (dwErrCode=0x0) [0117.689] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.690] SetLastError (dwErrCode=0x0) [0117.690] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.691] SetLastError (dwErrCode=0x0) [0117.691] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.692] GetLastError () returned 0x0 [0117.692] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.693] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.693] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.693] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.693] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.693] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.693] SetLastError (dwErrCode=0x0) [0117.693] GetLastError () returned 0x0 [0117.694] SetLastError (dwErrCode=0x0) [0117.694] GetLastError () returned 0x0 [0117.694] SetLastError (dwErrCode=0x0) [0117.694] GetLastError () returned 0x0 [0117.694] SetLastError (dwErrCode=0x0) [0117.694] GetLastError () returned 0x0 [0117.694] SetLastError (dwErrCode=0x0) [0117.694] GetLastError () returned 0x0 [0117.694] SetLastError (dwErrCode=0x0) [0117.694] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x52) returned 0x27e1768 [0117.694] GetLastError () returned 0x0 [0117.695] SetLastError (dwErrCode=0x0) [0117.695] GetLastError () returned 0x0 [0117.695] SetLastError (dwErrCode=0x0) [0117.695] GetLastError () returned 0x0 [0117.695] SetLastError (dwErrCode=0x0) [0117.695] GetLastError () returned 0x0 [0117.695] SetLastError (dwErrCode=0x0) [0117.695] GetLastError () returned 0x0 [0117.695] SetLastError (dwErrCode=0x0) [0117.695] GetLastError () returned 0x0 [0117.696] SetLastError (dwErrCode=0x0) [0117.696] GetLastError () returned 0x0 [0117.696] SetLastError (dwErrCode=0x0) [0117.696] GetLastError () returned 0x0 [0117.696] SetLastError (dwErrCode=0x0) [0117.696] GetLastError () returned 0x0 [0117.696] SetLastError (dwErrCode=0x0) [0117.696] GetLastError () returned 0x0 [0117.696] SetLastError (dwErrCode=0x0) [0117.696] GetLastError () returned 0x0 [0117.697] SetLastError (dwErrCode=0x0) [0117.697] GetLastError () returned 0x0 [0117.697] SetLastError (dwErrCode=0x0) [0117.697] GetLastError () returned 0x0 [0117.697] SetLastError (dwErrCode=0x0) [0117.697] GetLastError () returned 0x0 [0117.697] SetLastError (dwErrCode=0x0) [0117.697] GetLastError () returned 0x0 [0117.697] SetLastError (dwErrCode=0x0) [0117.697] GetLastError () returned 0x0 [0117.697] SetLastError (dwErrCode=0x0) [0117.697] GetLastError () returned 0x0 [0117.698] SetLastError (dwErrCode=0x0) [0117.698] GetLastError () returned 0x0 [0117.698] SetLastError (dwErrCode=0x0) [0117.698] GetLastError () returned 0x0 [0117.698] SetLastError (dwErrCode=0x0) [0117.698] GetLastError () returned 0x0 [0117.698] SetLastError (dwErrCode=0x0) [0117.698] GetLastError () returned 0x0 [0117.698] SetLastError (dwErrCode=0x0) [0117.698] GetLastError () returned 0x0 [0117.698] SetLastError (dwErrCode=0x0) [0117.698] GetLastError () returned 0x0 [0117.699] SetLastError (dwErrCode=0x0) [0117.699] GetLastError () returned 0x0 [0117.699] SetLastError (dwErrCode=0x0) [0117.699] GetLastError () returned 0x0 [0117.699] SetLastError (dwErrCode=0x0) [0117.699] GetLastError () returned 0x0 [0117.699] SetLastError (dwErrCode=0x0) [0117.699] GetLastError () returned 0x0 [0117.700] SetLastError (dwErrCode=0x0) [0117.700] GetLastError () returned 0x0 [0117.700] SetLastError (dwErrCode=0x0) [0117.700] GetLastError () returned 0x0 [0117.700] SetLastError (dwErrCode=0x0) [0117.700] GetLastError () returned 0x0 [0117.700] SetLastError (dwErrCode=0x0) [0117.700] GetLastError () returned 0x0 [0117.700] SetLastError (dwErrCode=0x0) [0117.700] GetLastError () returned 0x0 [0117.700] SetLastError (dwErrCode=0x0) [0117.700] GetLastError () returned 0x0 [0117.701] SetLastError (dwErrCode=0x0) [0117.701] GetLastError () returned 0x0 [0117.701] SetLastError (dwErrCode=0x0) [0117.701] GetLastError () returned 0x0 [0117.701] SetLastError (dwErrCode=0x0) [0117.701] GetLastError () returned 0x0 [0117.701] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.702] SetLastError (dwErrCode=0x0) [0117.702] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.703] SetLastError (dwErrCode=0x0) [0117.703] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.704] SetLastError (dwErrCode=0x0) [0117.704] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.705] GetLastError () returned 0x0 [0117.705] SetLastError (dwErrCode=0x0) [0117.706] GetLastError () returned 0x0 [0117.706] SetLastError (dwErrCode=0x0) [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x94) returned 0x27e17c8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x1f) returned 0x27e1868 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x28) returned 0x27e1890 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x37) returned 0x27e18c0 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x3c) returned 0x27e1900 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x31) returned 0x27e1948 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x14) returned 0x27e1988 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x24) returned 0x27e19a8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0xd) returned 0x27e19d8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x17) returned 0x27e19f0 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x2b) returned 0x27e1a10 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x15) returned 0x27e1a48 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x17) returned 0x27e1a68 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x22) returned 0x27e1a88 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0xe) returned 0x27e1ab8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0xc1) returned 0x27e1ad0 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x3e) returned 0x27e1ba0 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x1b) returned 0x27e1be8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x1d) returned 0x27e1c10 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x48) returned 0x27e1c38 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x12) returned 0x27e1c88 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x18) returned 0x27e1ca8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x1b) returned 0x27e1cc8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x24) returned 0x27e1cf0 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x29) returned 0x27e1d20 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x1e) returned 0x27e1d58 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x6b) returned 0x27e1d80 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x17) returned 0x27e1df8 [0117.706] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0xf) returned 0x27e1e18 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x16) returned 0x27e1e30 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x28) returned 0x27e1e50 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x27) returned 0x27e1e80 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x12) returned 0x27e1eb0 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x21) returned 0x27e1ed0 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x10) returned 0x27e1f00 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x1c) returned 0x27e1f18 [0117.707] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x12) returned 0x27e1f40 [0117.707] HeapFree (in: hHeap=0x27e0000, dwFlags=0x0, lpMem=0x27e07c8 | out: hHeap=0x27e0000) returned 1 [0119.158] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x80) returned 0x27e1f60 [0119.158] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x8, Size=0x800) returned 0x27e1fe8 [0119.797] RtlSizeHeap (HeapHandle=0x27e0000, Flags=0x0, MemoryPointer=0x27e1f60) returned 0x80 [0125.198] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x50) returned 0x27e07c8 [0127.046] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x2c) returned 0x27e0820 [0127.863] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x100) returned 0x27e0858 [0128.026] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x1c) returned 0x27e0960 [0128.186] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x1d0 [0129.129] Thread32First (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.130] GetCurrentProcessId () returned 0x6d0 [0129.130] GetCurrentThreadId () returned 0x115c [0129.246] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.247] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.247] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.248] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.248] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.249] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.250] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.250] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.251] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.251] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.252] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.253] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.253] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.254] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.254] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.255] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.256] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.256] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.257] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.257] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.258] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.258] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.259] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.260] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.260] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.261] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.262] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.262] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.263] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.263] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.264] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.265] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.265] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.311] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.312] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.312] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.313] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.313] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.314] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.314] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.314] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.315] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.315] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.316] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.316] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.317] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.317] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.318] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.318] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.319] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.319] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.320] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.321] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.321] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.322] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.322] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.323] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.324] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.324] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.325] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.325] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.326] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.326] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.327] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.327] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.328] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.328] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.329] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.329] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.330] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.330] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.331] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.331] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.332] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.332] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.333] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.333] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.334] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.334] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.335] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.335] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.336] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.336] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.337] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.337] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.338] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.338] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.339] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.339] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.340] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.340] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.341] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.341] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.342] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.342] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.343] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.343] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.391] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.392] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.392] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.393] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.393] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.393] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.394] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.394] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.395] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.395] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.396] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.396] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.397] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.397] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.398] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.398] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.398] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.399] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.399] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.400] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.400] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.401] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.401] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.402] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.402] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.403] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.404] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.404] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.405] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.405] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.406] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.406] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.407] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.407] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.408] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.408] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.409] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.409] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.410] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.410] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.411] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.412] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.412] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.413] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.413] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.414] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.415] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.415] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.416] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.416] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.417] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.418] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.418] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.419] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.419] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.420] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.421] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.421] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.422] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.422] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.423] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.424] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.424] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.425] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.425] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.426] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.426] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.427] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.428] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.428] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.429] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.429] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.430] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.431] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.431] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.432] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.432] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.433] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.434] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.434] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.435] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.435] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.436] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.437] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.437] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.486] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.486] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.487] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.488] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.488] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.489] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.489] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.490] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.490] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.491] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.492] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.492] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.493] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.493] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.494] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.494] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.495] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.496] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.496] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.497] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.497] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.498] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.498] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.499] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.499] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.500] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.501] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.501] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.502] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.502] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.503] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.503] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.504] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.505] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.505] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.506] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.506] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.507] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.507] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.508] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.508] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.509] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.509] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.510] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.510] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.511] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.511] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.512] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.513] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.513] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.514] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.514] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.515] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.515] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.516] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.516] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.517] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.517] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.518] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.518] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.519] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.519] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.519] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.520] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.520] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.521] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0129.521] Thread32Next (hSnapshot=0x1d0, lpte=0x7de58c) returned 1 [0130.264] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0x1158) returned 0x1d4 [0130.264] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x4) returned 0x27e0988 [0130.278] CloseHandle (hObject=0x1d0) returned 1 [0130.280] SuspendThread (hThread=0x1d4) returned 0x0 [0130.344] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0xc) returned 0x27e0998 [0130.344] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0xa) returned 0x27e09b0 [0130.345] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77970000 [0130.345] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0xc) returned 0x27e09c8 [0130.345] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x17) returned 0x27e09e0 [0130.370] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x10) returned 0x27e0a00 [0131.796] GetSystemInfo (in: lpSystemInfo=0x7de090 | out: lpSystemInfo=0x7de090*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0131.890] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xa60000 [0132.859] GetCurrentProcess () returned 0xffffffff [0132.859] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xa60005, lpBuffer=0x7de074*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x7de074*, lpNumberOfBytesWritten=0x0) returned 1 [0132.890] GetCurrentProcess () returned 0xffffffff [0132.891] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xa6000f, lpBuffer=0x7de078*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x7de078*, lpNumberOfBytesWritten=0x0) returned 1 [0132.992] GetCurrentProcess () returned 0xffffffff [0132.992] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x779e2210, lpBuffer=0x7de074*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x7de074*, lpNumberOfBytesWritten=0x0) returned 1 [0133.777] GetCurrentProcess () returned 0xffffffff [0133.849] VirtualProtect (in: lpAddress=0xa60000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x7de0b4 | out: lpflOldProtect=0x7de0b4*=0x40) returned 1 [0133.849] GetCurrentProcess () returned 0xffffffff [0133.971] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x4) returned 0x27e0a18 [0134.004] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0xc) returned 0x27e0a28 [0134.004] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x13) returned 0x27e0a40 [0134.037] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x10) returned 0x27e0a60 [0134.037] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xb50000 [0134.038] GetCurrentProcess () returned 0xffffffff [0134.038] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xb50007, lpBuffer=0x7de074*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x7de074*, lpNumberOfBytesWritten=0x0) returned 1 [0134.039] GetCurrentProcess () returned 0xffffffff [0134.039] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xb50013, lpBuffer=0x7de078*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x7de078*, lpNumberOfBytesWritten=0x0) returned 1 [0134.040] GetCurrentProcess () returned 0xffffffff [0134.040] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77a1a520, lpBuffer=0x7de074*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x7de074*, lpNumberOfBytesWritten=0x0) returned 1 [0134.040] GetCurrentProcess () returned 0xffffffff [0134.041] GetCurrentProcess () returned 0xffffffff [0134.041] VirtualProtect (in: lpAddress=0xb50000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x7de0b4 | out: lpflOldProtect=0x7de0b4*=0x40) returned 1 [0134.041] GetCurrentProcess () returned 0xffffffff [0134.042] RtlAllocateHeap (HeapHandle=0x27e0000, Flags=0x0, Size=0x8) returned 0x27e0a78 [0134.042] HeapFree (in: hHeap=0x27e0000, dwFlags=0x0, lpMem=0x27e0a18 | out: hHeap=0x27e0000) returned 1 [0134.059] ResumeThread (hThread=0x1d4) returned 0x1 [0134.075] CloseHandle (hObject=0x1d4) returned 1 [0134.076] HeapFree (in: hHeap=0x27e0000, dwFlags=0x0, lpMem=0x27e0988 | out: hHeap=0x27e0000) returned 1 [0135.159] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df84c*=0x7f000, NumberOfBytesToProtect=0x7df844, NewAccessProtection=0x20, OldAccessProtection=0x7dfb8c | out: BaseAddress=0x7df84c*=0x7f000, NumberOfBytesToProtect=0x7df844, OldAccessProtection=0x7dfb8c*=0x40) returned 0x0 [0135.176] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df84c*=0x75000, NumberOfBytesToProtect=0x7df844, NewAccessProtection=0x2, OldAccessProtection=0x7dfb8c | out: BaseAddress=0x7df84c*=0x75000, NumberOfBytesToProtect=0x7df844, OldAccessProtection=0x7dfb8c*=0x4) returned 0x0 [0135.177] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x7df84c*=0xa4000, NumberOfBytesToProtect=0x7df844, NewAccessProtection=0x4, OldAccessProtection=0x7dfb8c | out: BaseAddress=0x7df84c*=0xa4000, NumberOfBytesToProtect=0x7df844, OldAccessProtection=0x7dfb8c*=0x20) returned 0x0 [0135.178] GetStartupInfoW (in: lpStartupInfo=0x7dfca4 | out: lpStartupInfo=0x7dfca4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0135.178] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0135.178] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2750000 [0135.194] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0135.194] GetProcAddress (hModule=0x772d0000, lpProcName="FlsAlloc") returned 0x772e4ae0 [0135.194] GetProcAddress (hModule=0x772d0000, lpProcName="FlsGetValue") returned 0x772e4b20 [0135.194] GetProcAddress (hModule=0x772d0000, lpProcName="FlsSetValue") returned 0x772e4b40 [0135.194] GetProcAddress (hModule=0x772d0000, lpProcName="FlsFree") returned 0x772e4b00 [0135.195] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x214) returned 0x27505a8 [0135.195] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0135.225] GetCurrentThreadId () returned 0x115c [0135.225] GetStartupInfoW (in: lpStartupInfo=0x7dfc40 | out: lpStartupInfo=0x7dfc40*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0135.225] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x800) returned 0x27507c8 [0135.225] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0135.225] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0135.225] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0135.240] SetHandleCount (uNumber=0x20) returned 0x20 [0135.240] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe\" " [0135.241] GetEnvironmentStringsW () returned 0xbacc30* [0135.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0135.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x565) returned 0x2750fd0 [0135.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2750fd0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0135.241] FreeEnvironmentStringsW (penv=0xbacc30) returned 1 [0135.241] GetLastError () returned 0x12 [0135.241] SetLastError (dwErrCode=0x12) [0135.241] GetLastError () returned 0x12 [0135.241] SetLastError (dwErrCode=0x12) [0135.256] GetLastError () returned 0x12 [0135.256] SetLastError (dwErrCode=0x12) [0135.256] GetACP () returned 0x4e4 [0135.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x220) returned 0x2751540 [0135.256] GetLastError () returned 0x12 [0135.256] SetLastError (dwErrCode=0x12) [0135.256] IsValidCodePage (CodePage=0x4e4) returned 1 [0135.272] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x7dfc08 | out: lpCPInfo=0x7dfc08) returned 1 [0135.272] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x7df6d4 | out: lpCPInfo=0x7df6d4) returned 1 [0135.272] GetLastError () returned 0x12 [0135.272] SetLastError (dwErrCode=0x12) [0135.272] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7dfae8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0135.290] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7dfae8, cbMultiByte=256, lpWideCharStr=0x7df458, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0135.290] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x7df6e8 | out: lpCharType=0x7df6e8) returned 1 [0135.290] GetLastError () returned 0x12 [0135.290] SetLastError (dwErrCode=0x12) [0135.290] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7dfae8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0135.290] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7dfae8, cbMultiByte=256, lpWideCharStr=0x7df418, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0135.290] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0135.290] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x7df208, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0135.290] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x7df9e8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ]­ºû ü}", lpUsedDefaultChar=0x0) returned 256 [0135.290] GetLastError () returned 0x12 [0135.290] SetLastError (dwErrCode=0x12) [0135.290] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7dfae8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0135.290] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x7dfae8, cbMultiByte=256, lpWideCharStr=0x7df438, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0135.290] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0135.291] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x7df228, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0135.291] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x7df8e8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ]­ºû ü}", lpUsedDefaultChar=0x0) returned 256 [0135.291] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x7cc60, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cuserstestappdatalocaltemprar$exb6200.3208333.exe")) returned 0x49 [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.291] SetLastError (dwErrCode=0x0) [0135.291] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.292] SetLastError (dwErrCode=0x0) [0135.292] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.293] SetLastError (dwErrCode=0x0) [0135.293] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.294] SetLastError (dwErrCode=0x0) [0135.294] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.295] SetLastError (dwErrCode=0x0) [0135.295] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.296] SetLastError (dwErrCode=0x0) [0135.296] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] SetLastError (dwErrCode=0x0) [0135.297] GetLastError () returned 0x0 [0135.297] GetLastError () returned 0x0 [0135.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0x2751768 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.298] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.299] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.300] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.301] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] GetLastError () returned 0x0 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x94) returned 0x27517c8 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x1f) returned 0x2751868 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x28) returned 0x2751890 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x37) returned 0x27518c0 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x3c) returned 0x2751900 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x31) returned 0x2751948 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x14) returned 0x2751988 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x24) returned 0x27519a8 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0xd) returned 0x27519d8 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x17) returned 0x27519f0 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x2b) returned 0x2751a10 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x15) returned 0x2751a48 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x17) returned 0x2751a68 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x22) returned 0x2751a88 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0xe) returned 0x2751ab8 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0xc1) returned 0x2751ad0 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x3e) returned 0x2751ba0 [0135.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x1b) returned 0x2751be8 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x1d) returned 0x2751c10 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x48) returned 0x2751c38 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x12) returned 0x2751c88 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x18) returned 0x2751ca8 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x1b) returned 0x2751cc8 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x24) returned 0x2751cf0 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x29) returned 0x2751d20 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x1e) returned 0x2751d58 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x6b) returned 0x2751d80 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x17) returned 0x2751df8 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0xf) returned 0x2751e18 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x16) returned 0x2751e30 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x28) returned 0x2751e50 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x27) returned 0x2751e80 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x12) returned 0x2751eb0 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x21) returned 0x2751ed0 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x10) returned 0x2751f00 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x1c) returned 0x2751f18 [0135.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x12) returned 0x2751f40 [0135.303] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2750fd0 | out: hHeap=0x2750000) returned 1 [0135.350] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x80) returned 0x2751f60 [0135.350] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0135.350] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x8, Size=0x800) returned 0x2751fe8 [0135.350] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x6b823) returned 0x0 [0135.351] RtlSizeHeap (HeapHandle=0x2750000, Flags=0x0, MemoryPointer=0x2751f60) returned 0x80 [0135.380] LoadLibraryW (lpLibFileName="ADVAPI32.DLL") returned 0x756e0000 [0135.381] GetProcAddress (hModule=0x756e0000, lpProcName="SystemFunction036") returned 0x744329e0 [0135.381] SystemFunction036 (in: RandomBuffer=0x7dfc34, RandomBufferLength=0x4 | out: RandomBuffer=0x7dfc34) returned 1 [0135.381] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2750fd0 [0135.381] RtlSizeHeap (HeapHandle=0x2750000, Flags=0x0, MemoryPointer=0x2751f60) returned 0x80 [0135.381] SystemFunction036 (in: RandomBuffer=0x7dfc34, RandomBufferLength=0x4 | out: RandomBuffer=0x7dfc34) returned 1 [0135.381] RtlSizeHeap (HeapHandle=0x2750000, Flags=0x0, MemoryPointer=0x2751f60) returned 0x80 [0135.382] RtlSizeHeap (HeapHandle=0x2750000, Flags=0x0, MemoryPointer=0x2751f60) returned 0x80 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.382] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.383] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.384] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.385] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] GetLastError () returned 0x0 [0135.386] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="AEEAEE SET") returned 0x1d4 [0135.386] GetLastError () returned 0x0 [0135.386] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0135.387] GetStockObject (i=0) returned 0x900010 [0135.387] RegisterClassW (lpWndClass=0x7dfc2c) returned 0xc151 [0135.388] GetSystemMetrics (nIndex=1) returned 900 [0135.390] GetCurrentProcess () returned 0xffffffff [0136.331] GetCurrentProcess () returned 0xffffffff [0136.583] GetCurrentProcess () returned 0xffffffff [0136.583] GetCurrentProcess () returned 0xffffffff [0136.584] GetCurrentProcess () returned 0xffffffff [0136.589] GetSystemMetrics (nIndex=0) returned 1440 [0136.589] CreateWindowExW (dwExStyle=0x0, lpClassName="window", lpWindowName="window", dwStyle=0xcf0000, X=560, Y=402, nWidth=320, nHeight=96, hWndParent=0x0, hMenu=0x0, hInstance=0x60000, lpParam=0x0) returned 0x0 [0136.590] GetCurrentProcess () returned 0xffffffff [0137.566] GetCurrentProcess () returned 0xffffffff [0137.567] GetCurrentProcess () returned 0xffffffff [0137.567] GetCurrentProcess () returned 0xffffffff [0137.569] GetCurrentProcess () returned 0xffffffff [0139.794] GetCurrentProcess () returned 0xffffffff [0139.795] GetCurrentProcess () returned 0xffffffff [0139.795] GetCurrentProcess () returned 0xffffffff [0139.796] GetCurrentProcess () returned 0xffffffff [0139.797] GetCurrentProcess () returned 0xffffffff [0139.827] GetCurrentProcess () returned 0xffffffff [0139.828] GetCurrentProcess () returned 0xffffffff [0139.831] SetWindowLongW (hWnd=0x0, nIndex=-16, dwNewLong=0) returned 0 [0139.831] ShowWindow (hWnd=0x0, nCmdShow=0) returned 0 [0139.832] GetComputerNameA (in: lpBuffer=0x7d390, nSize=0x7dfc28 | out: lpBuffer="NQDPDE", nSize=0x7dfc28) returned 1 [0139.833] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5f5e100) returned 0x29fb020 [0140.157] CreateFileW (lpFileName="Czuw.pIs" (normalized: "c:\\users\\fd1hvy\\desktop\\czuw.pis"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0140.188] ReadFile (in: hFile=0x1e0, lpBuffer=0x7df7f8, nNumberOfBytesToRead=0x250, lpNumberOfBytesRead=0x7df7f4, lpOverlapped=0x0 | out: lpBuffer=0x7df7f8*, lpNumberOfBytesRead=0x7df7f4*=0x0, lpOverlapped=0x0) returned 1 [0140.500] SHEmptyRecycleBinW (hwnd=0x0, pszRootPath=0x0, dwFlags=0x7) returned 0x8000ffff [0140.500] GetCurrentProcess () returned 0xffffffff [0140.501] GetCurrentProcess () returned 0xffffffff [0140.505] GetCurrentProcess () returned 0xffffffff [0140.505] GetCurrentProcess () returned 0xffffffff [0140.506] GetCurrentProcess () returned 0xffffffff [0140.507] GetCurrentProcess () returned 0xffffffff [0140.508] GetCurrentProcess () returned 0xffffffff [0140.509] GetCurrentProcess () returned 0xffffffff [0140.512] GetCurrentProcess () returned 0xffffffff [0140.513] GetCurrentProcess () returned 0xffffffff [0140.524] GetCurrentProcess () returned 0xffffffff [0140.525] GetCurrentProcess () returned 0xffffffff [0140.535] GetCurrentProcess () returned 0xffffffff [0140.535] GetCurrentProcess () returned 0xffffffff [0140.545] GetCurrentProcess () returned 0xffffffff [0144.629] GetCurrentProcess () returned 0xffffffff [0145.014] GetCurrentProcess () returned 0xffffffff [0145.016] GetCurrentProcess () returned 0xffffffff [0145.017] GetCurrentProcess () returned 0xffffffff [0145.020] GetCurrentProcess () returned 0xffffffff [0145.021] GetCurrentProcess () returned 0xffffffff [0145.021] GetCurrentProcess () returned 0xffffffff [0145.022] GetCurrentProcess () returned 0xffffffff [0145.043] GetCurrentProcess () returned 0xffffffff [0145.044] GetCurrentProcess () returned 0xffffffff [0145.045] GetCurrentProcess () returned 0xffffffff [0145.045] GetCurrentProcess () returned 0xffffffff [0145.046] GetCurrentProcess () returned 0xffffffff [0145.047] GetCurrentProcess () returned 0xffffffff [0145.053] GetCurrentProcess () returned 0xffffffff [0145.053] GetCurrentProcess () returned 0xffffffff [0145.056] GetCurrentProcess () returned 0xffffffff [0145.056] GetCurrentProcess () returned 0xffffffff [0145.057] GetCurrentProcess () returned 0xffffffff [0145.057] GetCurrentProcess () returned 0xffffffff [0145.404] GetCurrentProcess () returned 0xffffffff [0145.404] GetCurrentProcess () returned 0xffffffff [0145.405] GetCurrentProcess () returned 0xffffffff [0145.405] GetCurrentProcess () returned 0xffffffff [0145.408] GetCurrentProcess () returned 0xffffffff [0145.408] GetCurrentProcess () returned 0xffffffff [0145.413] GetCurrentProcess () returned 0xffffffff [0145.413] GetCurrentProcess () returned 0xffffffff [0145.416] GetCurrentProcess () returned 0xffffffff [0145.416] GetCurrentProcess () returned 0xffffffff [0145.599] GetCurrentProcess () returned 0xffffffff [0145.600] GetCurrentProcess () returned 0xffffffff [0145.857] GetCurrentProcess () returned 0xffffffff [0146.143] GetCurrentProcess () returned 0xffffffff [0146.144] GetCurrentProcess () returned 0xffffffff [0146.145] GetCurrentProcess () returned 0xffffffff [0146.146] GetCurrentProcess () returned 0xffffffff [0146.147] GetCurrentProcess () returned 0xffffffff [0146.148] GetCurrentProcess () returned 0xffffffff [0146.171] GetCurrentProcess () returned 0xffffffff [0146.729] GetCurrentProcess () returned 0xffffffff [0146.729] GetCurrentProcess () returned 0xffffffff [0146.730] GetCurrentProcess () returned 0xffffffff [0146.731] GetCurrentProcess () returned 0xffffffff [0146.734] GetCurrentProcess () returned 0xffffffff [0146.735] GetCurrentProcess () returned 0xffffffff [0146.739] GetCurrentProcess () returned 0xffffffff [0146.740] GetCurrentProcess () returned 0xffffffff [0146.741] GetCurrentProcess () returned 0xffffffff [0146.742] GetCurrentProcess () returned 0xffffffff [0146.763] GetCurrentProcess () returned 0xffffffff [0152.138] GetCurrentProcess () returned 0xffffffff [0152.713] GetCurrentProcess () returned 0xffffffff [0152.714] GetCurrentProcess () returned 0xffffffff [0152.717] GetCurrentProcess () returned 0xffffffff [0152.749] GetCurrentProcess () returned 0xffffffff [0152.750] GetCurrentProcess () returned 0xffffffff [0152.756] GetCurrentProcess () returned 0xffffffff [0152.757] GetCurrentProcess () returned 0xffffffff [0152.760] GetCurrentProcess () returned 0xffffffff [0152.761] GetCurrentProcess () returned 0xffffffff [0152.788] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Active Directory Toplogy\"", uCmdShow=0x0) returned 0x21 [0153.004] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Anti-spam Update\"", uCmdShow=0x0) returned 0x21 [0153.025] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Compliance Audit\"", uCmdShow=0x0) returned 0x21 [0153.043] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Compliance Service\"", uCmdShow=0x0) returned 0x21 [0153.066] WinExec (lpCmdLine="sc stop \"Microsoft Exchange DAG Management\"", uCmdShow=0x0) returned 0x21 [0153.234] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Diagnostics\"", uCmdShow=0x0) returned 0x21 [0153.260] WinExec (lpCmdLine="sc stop \"Microsoft Exchange EdgeSync\"", uCmdShow=0x0) returned 0x21 [0153.289] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Frontend Transport\"", uCmdShow=0x0) returned 0x21 [0153.312] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Health Manager\"", uCmdShow=0x0) returned 0x21 [0153.342] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Health Manager Recovery\"", uCmdShow=0x0) returned 0x21 [0153.386] WinExec (lpCmdLine="sc stop \"Microsoft Exchange IMAP4\"", uCmdShow=0x0) returned 0x21 [0153.779] WinExec (lpCmdLine="sc stop \"Microsoft Exchange IMAP4 Backend\"", uCmdShow=0x0) returned 0x21 [0156.193] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Information Store\"", uCmdShow=0x0) returned 0x21 [0160.292] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Mailbox Assistants\"", uCmdShow=0x0) returned 0x21 [0160.323] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Mailbox Replication\"", uCmdShow=0x0) returned 0x21 [0161.047] WinExec (lpCmdLine="sc stop \"Microsoft Exchange Mailbox Transport Delivery\"", uCmdShow=0x0) returned 0x21 [0161.087] WinExec (lpCmdLine="sc stop \"Microsoft Exchange POP3\"", uCmdShow=0x0) returned 0x21 [0161.120] WinExec (lpCmdLine="sc stop \"Microsoft Exchange POP3 Backend\"", uCmdShow=0x0) returned 0x21 [0161.781] WinExec (lpCmdLine="sc stop \"SQL Server Agent (TESTINSTANCE)\"", uCmdShow=0x0) returned 0x21 [0161.814] WinExec (lpCmdLine="sc stop \"SQL Server (TESTINSTANCE)\"", uCmdShow=0x0) returned 0x21 [0165.114] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x7df548, csidl=0, fCreate=0 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 1 [0165.213] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HowToDecrypt.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\howtodecrypt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0166.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x1f0) returned 0x2751028 [0167.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x20) returned 0x2751220 [0167.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0x2751248 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751220 | out: hHeap=0x2750000) returned 1 [0167.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x47) returned 0x2751280 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751248 | out: hHeap=0x2750000) returned 1 [0167.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0x27512d0 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751280 | out: hHeap=0x2750000) returned 1 [0167.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0x2751220 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512d0 | out: hHeap=0x2750000) returned 1 [0167.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xec) returned 0x27512d0 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751220 | out: hHeap=0x2750000) returned 1 [0167.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x161) returned 0x27513c8 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512d0 | out: hHeap=0x2750000) returned 1 [0167.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x211) returned 0x27527f0 [0167.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c8 | out: hHeap=0x2750000) returned 1 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751028 | out: hHeap=0x2750000) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x1f0) returned 0x2751028 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x20) returned 0x2751220 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0x2751248 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751220 | out: hHeap=0x2750000) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x47) returned 0x2751280 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751248 | out: hHeap=0x2750000) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0x27512d0 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751280 | out: hHeap=0x2750000) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0x2751220 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512d0 | out: hHeap=0x2750000) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xec) returned 0x27512d0 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751220 | out: hHeap=0x2750000) returned 1 [0167.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x161) returned 0x27513c8 [0167.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512d0 | out: hHeap=0x2750000) returned 1 [0167.592] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x211) returned 0x2752a10 [0167.592] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c8 | out: hHeap=0x2750000) returned 1 [0167.592] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751028 | out: hHeap=0x2750000) returned 1 [0167.592] WriteFile (in: hFile=0x1f4, lpBuffer=0x2752a10*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x7df4d0, lpOverlapped=0x0 | out: lpBuffer=0x2752a10*, lpNumberOfBytesWritten=0x7df4d0*=0x170, lpOverlapped=0x0) returned 1 [0167.593] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a10 | out: hHeap=0x2750000) returned 1 [0167.593] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0167.594] CloseHandle (hObject=0x1f4) returned 1 [0167.877] GetLogicalDrives () returned 0x4 [0167.877] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0167.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751028 [0167.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751038 [0167.877] CreateFileW (lpFileName="C:\\HowToDecrypt.txt" (normalized: "c:\\howtodecrypt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0167.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x1f0) returned 0x2751048 [0167.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x20) returned 0x2751240 [0167.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0x2751268 [0167.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751240 | out: hHeap=0x2750000) returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x47) returned 0x27512a0 [0167.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751268 | out: hHeap=0x2750000) returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0x27512f0 [0167.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512a0 | out: hHeap=0x2750000) returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0x2751240 [0167.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512f0 | out: hHeap=0x2750000) returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xec) returned 0x27512f0 [0167.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751240 | out: hHeap=0x2750000) returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x161) returned 0x27527f0 [0167.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512f0 | out: hHeap=0x2750000) returned 1 [0167.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x211) returned 0x2751240 [0167.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751048 | out: hHeap=0x2750000) returned 1 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x1f0) returned 0x2751048 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x20) returned 0x2751460 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0x2751488 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751460 | out: hHeap=0x2750000) returned 1 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x47) returned 0x27514c0 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751488 | out: hHeap=0x2750000) returned 1 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0x27527f0 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514c0 | out: hHeap=0x2750000) returned 1 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0x2751460 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xec) returned 0x27527f0 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751460 | out: hHeap=0x2750000) returned 1 [0167.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x161) returned 0x27528e8 [0167.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0167.881] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x211) returned 0x2752a58 [0167.881] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27528e8 | out: hHeap=0x2750000) returned 1 [0167.881] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751048 | out: hHeap=0x2750000) returned 1 [0167.881] WriteFile (in: hFile=0x1f4, lpBuffer=0x2752a58*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x7df4d0, lpOverlapped=0x0 | out: lpBuffer=0x2752a58*, lpNumberOfBytesWritten=0x7df4d0*=0x170, lpOverlapped=0x0) returned 1 [0167.882] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a58 | out: hHeap=0x2750000) returned 1 [0167.882] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751240 | out: hHeap=0x2750000) returned 1 [0167.882] CloseHandle (hObject=0x1f4) returned 1 [0167.899] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xbba408 [0167.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751048 [0167.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x1e) returned 0x2751058 [0167.899] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0167.899] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0167.900] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751080 [0167.900] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0x2751090 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0167.900] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0167.901] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27510c8 [0167.901] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xe) returned 0x27510d8 [0167.901] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0167.901] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3af588c, ftCreationTime.dwHighDateTime=0x1d6669a, ftLastAccessTime.dwLowDateTime=0xa3af588c, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xa3af588c, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HowToDecrypt.txt", cAlternateFileName="HOWTOD~1.TXT")) returned 1 [0167.901] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0167.901] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27510f0 [0167.901] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x10) returned 0x2751100 [0167.901] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xaced8ceb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0167.901] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751118 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x18) returned 0x2751128 [0167.902] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfb7d6182, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xfb7d6182, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751148 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x22) returned 0x2751158 [0167.902] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751188 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2e) returned 0x2751198 [0167.902] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0167.902] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27511d0 [0167.903] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x1e) returned 0x27511e0 [0167.903] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0167.903] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xacefef79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0167.903] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0167.903] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0167.903] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751208 [0167.903] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x12) returned 0x2751218 [0167.903] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0167.903] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0167.903] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751238 [0167.904] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x28) returned 0x2751248 [0167.904] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0167.904] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0167.904] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0168.196] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.197] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0168.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751278 [0168.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2751288 [0168.197] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3659ec, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3659ec, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x704c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="appraiserxp.dll", cAlternateFileName="APPRAI~1.DLL")) returned 1 [0168.198] CreateFileW (lpFileName="C:\\Windows10Upgrade\\appraiserxp.dll" (normalized: "c:\\windows10upgrade\\appraiserxp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0168.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0168.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0168.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0168.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27512c8 [0168.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0168.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2751440 [0168.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0168.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0168.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2751440 [0168.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0168.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0168.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0168.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0168.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0168.668] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0168.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2751440 [0169.123] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0169.123] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0169.124] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0169.124] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0169.125] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0169.126] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0169.126] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0169.126] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512c8 | out: hHeap=0x2750000) returned 1 [0169.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0169.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0169.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4c8, lpOverlapped=0x0) returned 1 [0169.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0169.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4d0, lpOverlapped=0x0) returned 1 [0169.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0169.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0169.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0169.604] CloseHandle (hObject=0x1f0) returned 1 [0170.137] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.137] SetEndOfFile (hFile=0x1e0) returned 1 [0170.777] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\appraiserxp.dll" (normalized: "c:\\windows10upgrade\\appraiserxp.dll"), lpNewFileName="C:\\Windows10Upgrade\\appraiserxp.dll.vhd" (normalized: "c:\\windows10upgrade\\appraiserxp.dll.vhd")) returned 1 [0170.778] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36cf08, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36cf08, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootsect.exe", cAlternateFileName="")) returned 1 [0170.778] CreateFileW (lpFileName="C:\\Windows10Upgrade\\bootsect.exe" (normalized: "c:\\windows10upgrade\\bootsect.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0170.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0170.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0170.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0170.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27512c8 [0170.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0170.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2751440 [0170.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0170.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0170.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2751440 [0170.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0170.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0170.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0170.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0170.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0170.798] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0170.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2751440 [0170.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0170.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0170.798] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0170.798] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0170.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0170.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0170.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0170.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512c8 | out: hHeap=0x2750000) returned 1 [0170.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0170.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.304] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.306] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.306] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.306] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.307] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.307] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.307] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.307] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.309] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.309] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.309] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.310] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.310] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.310] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xec8, lpOverlapped=0x0) returned 1 [0171.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.311] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xed0, lpOverlapped=0x0) returned 1 [0171.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.311] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0171.311] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0171.311] CloseHandle (hObject=0x1f0) returned 1 [0171.314] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.314] SetEndOfFile (hFile=0x1e0) returned 1 [0171.314] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\bootsect.exe" (normalized: "c:\\windows10upgrade\\bootsect.exe"), lpNewFileName="C:\\Windows10Upgrade\\bootsect.exe.vhd" (normalized: "c:\\windows10upgrade\\bootsect.exe.vhd")) returned 1 [0171.315] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea350dad, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea350dad, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xb08c3ee, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Configuration.ini", cAlternateFileName="CONFIG~1.INI")) returned 1 [0171.315] CreateFileW (lpFileName="C:\\Windows10Upgrade\\Configuration.ini" (normalized: "c:\\windows10upgrade\\configuration.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27512c8 [0171.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0171.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2751440 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0171.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2751440 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.322] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0171.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2751440 [0171.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0171.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0171.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0171.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512c8 | out: hHeap=0x2750000) returned 1 [0171.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd4, lpOverlapped=0x0) returned 1 [0171.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff2c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe0, lpOverlapped=0x0) returned 1 [0171.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0171.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0171.325] CloseHandle (hObject=0x1f0) returned 1 [0171.326] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.326] SetEndOfFile (hFile=0x1e0) returned 1 [0171.326] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\Configuration.ini" (normalized: "c:\\windows10upgrade\\configuration.ini"), lpNewFileName="C:\\Windows10Upgrade\\Configuration.ini.vhd" (normalized: "c:\\windows10upgrade\\configuration.ini.vhd")) returned 1 [0171.327] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36e29e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36e29e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xf0c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cosquery.dll", cAlternateFileName="")) returned 1 [0171.327] CreateFileW (lpFileName="C:\\Windows10Upgrade\\cosquery.dll" (normalized: "c:\\windows10upgrade\\cosquery.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0171.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0171.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27512c8 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2751440 [0171.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2751440 [0171.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0171.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0171.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.336] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2751440 [0171.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0171.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0171.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0171.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0171.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512c8 | out: hHeap=0x2750000) returned 1 [0171.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10c8, lpOverlapped=0x0) returned 1 [0171.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10d0, lpOverlapped=0x0) returned 1 [0171.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0171.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0171.439] CloseHandle (hObject=0x1f0) returned 1 [0171.443] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.443] SetEndOfFile (hFile=0x1e0) returned 1 [0171.444] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\cosquery.dll" (normalized: "c:\\windows10upgrade\\cosquery.dll"), lpNewFileName="C:\\Windows10Upgrade\\cosquery.dll.vhd" (normalized: "c:\\windows10upgrade\\cosquery.dll.vhd")) returned 1 [0171.444] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea370998, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea370998, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x508c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DevInv.dll", cAlternateFileName="")) returned 1 [0171.445] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DevInv.dll" (normalized: "c:\\windows10upgrade\\devinv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0171.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27512c8 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2751440 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2751440 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.538] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2751440 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0171.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0171.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751440 | out: hHeap=0x2750000) returned 1 [0171.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0171.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0171.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27512c8 | out: hHeap=0x2750000) returned 1 [0171.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0171.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0171.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0171.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0171.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0172.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0172.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c8, lpOverlapped=0x0) returned 1 [0172.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff738, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0172.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8d0, lpOverlapped=0x0) returned 1 [0172.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0172.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0172.079] CloseHandle (hObject=0x1f0) returned 1 [0172.090] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0172.090] SetEndOfFile (hFile=0x1e0) returned 1 [0172.622] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DevInv.dll" (normalized: "c:\\windows10upgrade\\devinv.dll"), lpNewFileName="C:\\Windows10Upgrade\\DevInv.dll.vhd" (normalized: "c:\\windows10upgrade\\devinv.dll.vhd")) returned 1 [0172.623] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea377ed3, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dll1", cAlternateFileName="")) returned 1 [0172.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27512c8 [0172.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x27512d8 [0172.623] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37cd05, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dll2", cAlternateFileName="")) returned 1 [0172.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751318 [0172.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2751328 [0172.623] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea380798, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea380798, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x326c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="downloader.dll", cAlternateFileName="DOWNLO~1.DLL")) returned 1 [0172.623] CreateFileW (lpFileName="C:\\Windows10Upgrade\\downloader.dll" (normalized: "c:\\windows10upgrade\\downloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0173.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0173.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0173.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0173.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0173.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0173.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0173.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0173.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0173.239] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0173.239] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0173.239] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.239] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0173.239] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0173.239] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0173.239] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0173.239] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.240] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0173.242] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0173.243] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0173.243] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.243] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0173.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6c8, lpOverlapped=0x0) returned 1 [0173.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff938, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6d0, lpOverlapped=0x0) returned 1 [0173.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0173.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0173.604] CloseHandle (hObject=0x1f0) returned 1 [0173.612] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.612] SetEndOfFile (hFile=0x1e0) returned 1 [0173.612] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\downloader.dll" (normalized: "c:\\windows10upgrade\\downloader.dll"), lpNewFileName="C:\\Windows10Upgrade\\downloader.dll.vhd" (normalized: "c:\\windows10upgrade\\downloader.dll.vhd")) returned 1 [0173.613] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea381b2a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea381b2a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9d2c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0173.776] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DW20.EXE" (normalized: "c:\\windows10upgrade\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0173.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0173.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0173.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0173.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0173.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0173.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0173.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0173.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0173.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0173.945] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0173.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.945] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0173.945] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0173.946] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0173.946] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0173.946] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.946] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0173.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0173.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0173.948] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0173.948] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0173.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0173.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.984] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0173.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0173.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0173.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.419] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.419] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12c8, lpOverlapped=0x0) returned 1 [0174.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12d0, lpOverlapped=0x0) returned 1 [0174.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0174.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0174.437] CloseHandle (hObject=0x1f0) returned 1 [0174.457] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.457] SetEndOfFile (hFile=0x1e0) returned 1 [0174.859] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DW20.EXE" (normalized: "c:\\windows10upgrade\\dw20.exe"), lpNewFileName="C:\\Windows10Upgrade\\DW20.EXE.vhd" (normalized: "c:\\windows10upgrade\\dw20.exe.vhd")) returned 1 [0174.861] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea385605, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea385605, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xc2c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWDCW20.DLL", cAlternateFileName="")) returned 1 [0174.861] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DWDCW20.DLL" (normalized: "c:\\windows10upgrade\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0174.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0174.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0174.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0174.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0174.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0174.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0174.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0174.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0174.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0174.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0174.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0174.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0174.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0174.874] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0174.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0174.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0174.875] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0174.875] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0174.875] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0174.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0174.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0174.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0174.877] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0174.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0174.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0174.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0174.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2c8, lpOverlapped=0x0) returned 1 [0174.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0174.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2d0, lpOverlapped=0x0) returned 1 [0175.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0175.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0175.137] CloseHandle (hObject=0x1f0) returned 1 [0175.455] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.455] SetEndOfFile (hFile=0x1e0) returned 1 [0175.455] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DWDCW20.DLL" (normalized: "c:\\windows10upgrade\\dwdcw20.dll"), lpNewFileName="C:\\Windows10Upgrade\\DWDCW20.DLL.vhd" (normalized: "c:\\windows10upgrade\\dwdcw20.dll.vhd")) returned 1 [0175.456] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea386943, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea386943, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xb2c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0175.456] CreateFileW (lpFileName="C:\\Windows10Upgrade\\DWTRIG20.EXE" (normalized: "c:\\windows10upgrade\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0175.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0175.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0175.470] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0175.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0175.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0175.471] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0175.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0175.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0175.471] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0175.471] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0175.471] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0175.472] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0175.472] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0175.472] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0175.472] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0175.472] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0175.472] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0175.472] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0175.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0175.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0175.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0175.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0175.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0175.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0175.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0175.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0175.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0175.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0175.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0175.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0175.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0175.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0175.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0175.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12c8, lpOverlapped=0x0) returned 1 [0175.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12d0, lpOverlapped=0x0) returned 1 [0175.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0175.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0175.482] CloseHandle (hObject=0x1f0) returned 1 [0175.488] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0175.488] SetEndOfFile (hFile=0x1e0) returned 1 [0175.489] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\DWTRIG20.EXE" (normalized: "c:\\windows10upgrade\\dwtrig20.exe"), lpNewFileName="C:\\Windows10Upgrade\\DWTRIG20.EXE.vhd" (normalized: "c:\\windows10upgrade\\dwtrig20.exe.vhd")) returned 1 [0175.490] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea387cd0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea387cd0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EnableWiFiTracing.cmd", cAlternateFileName="ENABLE~1.CMD")) returned 1 [0175.490] CreateFileW (lpFileName="C:\\Windows10Upgrade\\EnableWiFiTracing.cmd" (normalized: "c:\\windows10upgrade\\enablewifitracing.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0175.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0175.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.132] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0176.132] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0176.132] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0176.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.133] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0176.133] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0176.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0176.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.133] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.133] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0176.134] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0176.134] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0176.134] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0176.134] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.134] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0176.135] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.135] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.135] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.136] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0176.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x652, lpOverlapped=0x0) returned 1 [0176.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff9ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x660, lpOverlapped=0x0) returned 1 [0176.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0176.141] CloseHandle (hObject=0x1f0) returned 1 [0176.144] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.144] SetEndOfFile (hFile=0x1e0) returned 1 [0176.144] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\EnableWiFiTracing.cmd" (normalized: "c:\\windows10upgrade\\enablewifitracing.cmd"), lpNewFileName="C:\\Windows10Upgrade\\EnableWiFiTracing.cmd.vhd" (normalized: "c:\\windows10upgrade\\enablewifitracing.cmd.vhd")) returned 1 [0176.145] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea389060, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea389060, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x10cc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESDHelper.dll", cAlternateFileName="ESDHEL~1.DLL")) returned 1 [0176.145] CreateFileW (lpFileName="C:\\Windows10Upgrade\\ESDHelper.dll" (normalized: "c:\\windows10upgrade\\esdhelper.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0176.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0176.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0176.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0176.159] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0176.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0176.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0176.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.161] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0176.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0176.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0176.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0176.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0176.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0176.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.256] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc8, lpOverlapped=0x0) returned 1 [0176.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcd0, lpOverlapped=0x0) returned 1 [0176.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0176.384] CloseHandle (hObject=0x1f0) returned 1 [0176.387] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.388] SetEndOfFile (hFile=0x1e0) returned 1 [0176.388] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\ESDHelper.dll" (normalized: "c:\\windows10upgrade\\esdhelper.dll"), lpNewFileName="C:\\Windows10Upgrade\\ESDHelper.dll.vhd" (normalized: "c:\\windows10upgrade\\esdhelper.dll.vhd")) returned 1 [0176.389] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38cadd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38cadd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="esdstub.dll", cAlternateFileName="")) returned 1 [0176.389] CreateFileW (lpFileName="C:\\Windows10Upgrade\\esdstub.dll" (normalized: "c:\\windows10upgrade\\esdstub.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0176.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0176.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0176.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0176.433] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0176.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0176.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0176.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.434] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0176.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0176.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0176.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0176.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0176.437] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.437] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.437] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.437] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0176.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ec8, lpOverlapped=0x0) returned 1 [0176.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ed0, lpOverlapped=0x0) returned 1 [0176.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0176.445] CloseHandle (hObject=0x1f0) returned 1 [0176.453] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.454] SetEndOfFile (hFile=0x1e0) returned 1 [0176.454] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\esdstub.dll" (normalized: "c:\\windows10upgrade\\esdstub.dll"), lpNewFileName="C:\\Windows10Upgrade\\esdstub.dll.vhd" (normalized: "c:\\windows10upgrade\\esdstub.dll.vhd")) returned 1 [0176.455] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38de7f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38de7f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GatherOSState.EXE", cAlternateFileName="GATHER~1.EXE")) returned 1 [0176.455] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GatherOSState.EXE" (normalized: "c:\\windows10upgrade\\gatherosstate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0176.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.636] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0176.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0176.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0176.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.637] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0176.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0176.638] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.638] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0176.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0176.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ec8, lpOverlapped=0x0) returned 1 [0176.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ed0, lpOverlapped=0x0) returned 1 [0176.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0176.790] CloseHandle (hObject=0x1f0) returned 1 [0176.806] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.806] SetEndOfFile (hFile=0x1e0) returned 1 [0176.902] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GatherOSState.EXE" (normalized: "c:\\windows10upgrade\\gatherosstate.exe"), lpNewFileName="C:\\Windows10Upgrade\\GatherOSState.EXE.vhd" (normalized: "c:\\windows10upgrade\\gatherosstate.exe.vhd")) returned 1 [0176.903] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39058e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39058e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x83cc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentDeploy.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0176.903] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GetCurrentDeploy.dll" (normalized: "c:\\windows10upgrade\\getcurrentdeploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0176.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0176.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0176.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0176.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0176.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0176.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0176.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0176.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0176.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.917] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0176.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0176.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0176.918] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0176.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0176.919] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0176.919] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0176.919] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0176.919] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0176.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0176.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.944] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.946] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0176.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0176.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0176.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.013] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.013] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.013] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1cc8, lpOverlapped=0x0) returned 1 [0177.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1cd0, lpOverlapped=0x0) returned 1 [0177.046] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.046] CloseHandle (hObject=0x1f0) returned 1 [0177.121] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.122] SetEndOfFile (hFile=0x1e0) returned 1 [0177.150] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GetCurrentDeploy.dll" (normalized: "c:\\windows10upgrade\\getcurrentdeploy.dll"), lpNewFileName="C:\\Windows10Upgrade\\GetCurrentDeploy.dll.vhd" (normalized: "c:\\windows10upgrade\\getcurrentdeploy.dll.vhd")) returned 1 [0177.151] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea392ca4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea392ca4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~2.DLL")) returned 1 [0177.151] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GetCurrentOOBE.dll" (normalized: "c:\\windows10upgrade\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0177.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0177.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0177.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0177.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0177.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0177.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.162] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0177.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0177.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0177.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0177.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.164] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.165] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0177.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12c8, lpOverlapped=0x0) returned 1 [0177.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12d0, lpOverlapped=0x0) returned 1 [0177.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.216] CloseHandle (hObject=0x1f0) returned 1 [0177.234] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.351] SetEndOfFile (hFile=0x1e0) returned 1 [0177.451] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GetCurrentOOBE.dll" (normalized: "c:\\windows10upgrade\\getcurrentoobe.dll"), lpNewFileName="C:\\Windows10Upgrade\\GetCurrentOOBE.dll.vhd" (normalized: "c:\\windows10upgrade\\getcurrentoobe.dll.vhd")) returned 1 [0177.452] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39539e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39539e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x11ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentRollback.EXE", cAlternateFileName="GETCUR~1.EXE")) returned 1 [0177.452] CreateFileW (lpFileName="C:\\Windows10Upgrade\\GetCurrentRollback.EXE" (normalized: "c:\\windows10upgrade\\getcurrentrollback.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0177.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0177.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0177.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0177.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0177.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0177.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.474] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0177.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0177.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0177.475] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.475] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0177.476] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.476] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.476] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0177.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ec8, lpOverlapped=0x0) returned 1 [0177.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ed0, lpOverlapped=0x0) returned 1 [0177.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.524] CloseHandle (hObject=0x1f0) returned 1 [0177.528] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.528] SetEndOfFile (hFile=0x1e0) returned 1 [0177.529] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\GetCurrentRollback.EXE" (normalized: "c:\\windows10upgrade\\getcurrentrollback.exe"), lpNewFileName="C:\\Windows10Upgrade\\GetCurrentRollback.EXE.vhd" (normalized: "c:\\windows10upgrade\\getcurrentrollback.exe.vhd")) returned 1 [0177.530] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39673d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39673d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x6cc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HttpHelper.exe", cAlternateFileName="HTTPHE~1.EXE")) returned 1 [0177.530] CreateFileW (lpFileName="C:\\Windows10Upgrade\\HttpHelper.exe" (normalized: "c:\\windows10upgrade\\httphelper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.542] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0177.542] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0177.542] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0177.542] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.542] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0177.542] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0177.542] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.542] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0177.542] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.543] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.543] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.543] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.543] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0177.543] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0177.543] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0177.543] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.543] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0177.544] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.544] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.544] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.545] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0177.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc8, lpOverlapped=0x0) returned 1 [0177.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff338, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcd0, lpOverlapped=0x0) returned 1 [0177.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.550] CloseHandle (hObject=0x1f0) returned 1 [0177.552] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.552] SetEndOfFile (hFile=0x1e0) returned 1 [0177.552] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\HttpHelper.exe" (normalized: "c:\\windows10upgrade\\httphelper.exe"), lpNewFileName="C:\\Windows10Upgrade\\HttpHelper.exe.vhd" (normalized: "c:\\windows10upgrade\\httphelper.exe.vhd")) returned 1 [0177.553] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PostOOBEScript.cmd", cAlternateFileName="POSTOO~1.CMD")) returned 1 [0177.553] CreateFileW (lpFileName="C:\\Windows10Upgrade\\PostOOBEScript.cmd" (normalized: "c:\\windows10upgrade\\postoobescript.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2751368 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27514e0 [0177.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27514e0 [0177.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0177.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.612] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27514e0 [0177.613] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27527f0 [0177.613] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2752a00 [0177.613] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.613] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a00 | out: hHeap=0x2750000) returned 1 [0177.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27514e0 | out: hHeap=0x2750000) returned 1 [0177.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27527f0 [0177.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2751368 | out: hHeap=0x2750000) returned 1 [0177.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x241, lpOverlapped=0x0) returned 1 [0177.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffdbf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x250, lpOverlapped=0x0) returned 1 [0177.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.616] CloseHandle (hObject=0x1f0) returned 1 [0177.618] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.618] SetEndOfFile (hFile=0x1e0) returned 1 [0177.618] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\PostOOBEScript.cmd" (normalized: "c:\\windows10upgrade\\postoobescript.cmd"), lpNewFileName="C:\\Windows10Upgrade\\PostOOBEScript.cmd.vhd" (normalized: "c:\\windows10upgrade\\postoobescript.cmd.vhd")) returned 1 [0177.619] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0177.619] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2751368 [0177.619] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3c) returned 0x2751378 [0177.619] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9ef415, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea9ef415, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x624407ed, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0x3d14a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="upgrader_default.log", cAlternateFileName="UPGRAD~1.LOG")) returned 1 [0177.619] CreateFileW (lpFileName="C:\\Windows10Upgrade\\upgrader_default.log" (normalized: "c:\\windows10upgrade\\upgrader_default.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0177.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27527f0 [0177.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2752958 [0177.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0177.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2752958 [0177.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2752a60 [0177.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27527f0 | out: hHeap=0x2750000) returned 1 [0177.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752958 | out: hHeap=0x2750000) returned 1 [0177.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2752a60 | out: hHeap=0x2750000) returned 1 [0177.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.638] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.638] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.638] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0177.638] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755720 [0177.638] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755930 [0177.638] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0177.638] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755930 | out: hHeap=0x2750000) returned 1 [0177.640] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.640] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.640] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.640] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0177.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x114a, lpOverlapped=0x0) returned 1 [0177.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeeb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1150, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1150, lpOverlapped=0x0) returned 1 [0177.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.691] CloseHandle (hObject=0x1f0) returned 1 [0177.700] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.700] SetEndOfFile (hFile=0x1e0) returned 1 [0177.701] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\upgrader_default.log" (normalized: "c:\\windows10upgrade\\upgrader_default.log"), lpNewFileName="C:\\Windows10Upgrade\\upgrader_default.log.vhd" (normalized: "c:\\windows10upgrade\\upgrader_default.log.vhd")) returned 1 [0177.702] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdc86a8, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x32fe02cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="upgrader_win10.log", cAlternateFileName="UPGRAD~2.LOG")) returned 1 [0177.702] CreateFileW (lpFileName="C:\\Windows10Upgrade\\upgrader_win10.log" (normalized: "c:\\windows10upgrade\\upgrader_win10.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.772] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.774] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0177.774] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2755720 [0177.774] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27504a0 [0177.774] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.774] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.774] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2755888 [0177.775] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0177.775] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.775] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755888 | out: hHeap=0x2750000) returned 1 [0177.775] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.775] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.775] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.775] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0177.775] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755720 [0177.776] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755930 [0177.776] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0177.776] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755930 | out: hHeap=0x2750000) returned 1 [0177.777] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.777] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.777] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.777] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0177.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1044, lpOverlapped=0x0) returned 1 [0177.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffefbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1050, lpOverlapped=0x0) returned 1 [0177.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.782] CloseHandle (hObject=0x1f0) returned 1 [0177.784] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.784] SetEndOfFile (hFile=0x1e0) returned 1 [0177.784] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\upgrader_win10.log" (normalized: "c:\\windows10upgrade\\upgrader_win10.log"), lpNewFileName="C:\\Windows10Upgrade\\upgrader_win10.log.vhd" (normalized: "c:\\windows10upgrade\\upgrader_win10.log.vhd")) returned 1 [0177.785] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63f06a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63f06a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x880c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wimgapi.dll", cAlternateFileName="")) returned 1 [0177.785] CreateFileW (lpFileName="C:\\Windows10Upgrade\\wimgapi.dll" (normalized: "c:\\windows10upgrade\\wimgapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0177.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0177.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2755720 [0177.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27504a0 [0177.796] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x27559b0 [0177.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0177.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27559b0 | out: hHeap=0x2750000) returned 1 [0177.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.800] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0177.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0177.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755e90 [0177.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755720 [0177.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755e90 | out: hHeap=0x2750000) returned 1 [0177.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0177.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0177.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0177.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0177.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.819] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.820] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.820] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.820] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0177.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0177.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc8, lpOverlapped=0x0) returned 1 [0177.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd0, lpOverlapped=0x0) returned 1 [0177.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0177.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0177.981] CloseHandle (hObject=0x1f0) returned 1 [0177.995] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0177.995] SetEndOfFile (hFile=0x1e0) returned 1 [0177.996] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\wimgapi.dll" (normalized: "c:\\windows10upgrade\\wimgapi.dll"), lpNewFileName="C:\\Windows10Upgrade\\wimgapi.dll.vhd" (normalized: "c:\\windows10upgrade\\wimgapi.dll.vhd")) returned 1 [0177.997] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea642af3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea642af3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xdf8c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="windlp.dll", cAlternateFileName="")) returned 1 [0177.997] CreateFileW (lpFileName="C:\\Windows10Upgrade\\windlp.dll" (normalized: "c:\\windows10upgrade\\windlp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0177.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0177.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0178.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2755720 [0178.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27504a0 [0178.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.057] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.057] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2755900 [0178.057] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0178.057] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.057] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755900 | out: hHeap=0x2750000) returned 1 [0178.057] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.057] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.057] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0178.058] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0178.058] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755e90 [0178.058] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755720 [0178.058] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755e90 | out: hHeap=0x2750000) returned 1 [0178.058] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0178.059] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.059] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0178.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.063] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.079] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.079] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.080] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.085] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.131] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18c8, lpOverlapped=0x0) returned 1 [0178.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe738, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18d0, lpOverlapped=0x0) returned 1 [0178.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0178.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0178.205] CloseHandle (hObject=0x1f0) returned 1 [0178.230] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.230] SetEndOfFile (hFile=0x1e0) returned 1 [0178.263] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\windlp.dll" (normalized: "c:\\windows10upgrade\\windlp.dll"), lpNewFileName="C:\\Windows10Upgrade\\windlp.dll.vhd" (normalized: "c:\\windows10upgrade\\windlp.dll.vhd")) returned 1 [0178.264] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64a022, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64a022, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x159ac8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10UpgraderApp.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1 [0178.264] CreateFileW (lpFileName="C:\\Windows10Upgrade\\Windows10UpgraderApp.exe" (normalized: "c:\\windows10upgrade\\windows10upgraderapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0178.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0178.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.339] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0178.339] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2755720 [0178.339] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27504a0 [0178.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2755920 [0178.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0178.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755920 | out: hHeap=0x2750000) returned 1 [0178.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.341] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.341] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0178.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0178.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755e90 [0178.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755720 [0178.342] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755e90 | out: hHeap=0x2750000) returned 1 [0178.342] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0178.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0178.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.419] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.419] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0178.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0178.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ac8, lpOverlapped=0x0) returned 1 [0178.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe538, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ad0, lpOverlapped=0x0) returned 1 [0178.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0178.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0178.669] CloseHandle (hObject=0x1f0) returned 1 [0178.724] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.724] SetEndOfFile (hFile=0x1e0) returned 1 [0178.737] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\Windows10UpgraderApp.exe" (normalized: "c:\\windows10upgrade\\windows10upgraderapp.exe"), lpNewFileName="C:\\Windows10Upgrade\\Windows10UpgraderApp.exe.vhd" (normalized: "c:\\windows10upgrade\\windows10upgraderapp.exe.vhd")) returned 1 [0178.738] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64ee41, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64ee41, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinREBootApp32.exe", cAlternateFileName="WINREB~1.EXE")) returned 1 [0178.738] CreateFileW (lpFileName="C:\\Windows10Upgrade\\WinREBootApp32.exe" (normalized: "c:\\windows10upgrade\\winrebootapp32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0178.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0178.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0178.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0178.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0178.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2755720 [0178.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27504a0 [0178.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2755980 [0178.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0178.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.832] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755980 | out: hHeap=0x2750000) returned 1 [0178.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.832] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.832] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0178.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0178.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755e90 [0178.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755720 [0178.832] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755e90 | out: hHeap=0x2750000) returned 1 [0178.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0178.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0178.834] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0178.834] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0178.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0178.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0179.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0179.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0179.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0179.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0179.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0179.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2c8, lpOverlapped=0x0) returned 1 [0179.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2d0, lpOverlapped=0x0) returned 1 [0179.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0179.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0179.225] CloseHandle (hObject=0x1f0) returned 1 [0179.227] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.227] SetEndOfFile (hFile=0x1e0) returned 1 [0179.227] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\WinREBootApp32.exe" (normalized: "c:\\windows10upgrade\\winrebootapp32.exe"), lpNewFileName="C:\\Windows10Upgrade\\WinREBootApp32.exe.vhd" (normalized: "c:\\windows10upgrade\\winrebootapp32.exe.vhd")) returned 1 [0179.228] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 1 [0179.228] CreateFileW (lpFileName="C:\\Windows10Upgrade\\WinREBootApp64.exe" (normalized: "c:\\windows10upgrade\\winrebootapp64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0179.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0179.244] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27513c0 [0179.244] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2755720 [0179.244] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27504a0 [0179.244] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0179.244] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0179.244] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2755a70 [0179.244] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0179.244] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0179.245] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755a70 | out: hHeap=0x2750000) returned 1 [0179.245] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0179.245] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0179.245] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0179.245] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x27504a0 [0179.245] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2755e90 [0179.245] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2755720 [0179.245] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755e90 | out: hHeap=0x2750000) returned 1 [0179.245] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2755720 | out: hHeap=0x2750000) returned 1 [0179.246] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0179.246] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27504a0 [0179.246] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27504a0 | out: hHeap=0x2750000) returned 1 [0179.246] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27513c0 | out: hHeap=0x2750000) returned 1 [0179.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0179.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0179.248] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0179.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.249] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0179.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0179.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0179.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4c8, lpOverlapped=0x0) returned 1 [0179.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0179.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4d0, lpOverlapped=0x0) returned 1 [0179.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0179.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0179.251] CloseHandle (hObject=0x1f0) returned 1 [0179.253] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0179.253] SetEndOfFile (hFile=0x1e0) returned 1 [0179.253] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\WinREBootApp64.exe" (normalized: "c:\\windows10upgrade\\winrebootapp64.exe"), lpNewFileName="C:\\Windows10Upgrade\\WinREBootApp64.exe.vhd" (normalized: "c:\\windows10upgrade\\winrebootapp64.exe.vhd")) returned 1 [0179.254] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 0 [0179.254] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0179.255] FindFirstFileW (in: lpFileName="C:\\Users\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0179.255] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.255] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0179.255] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0179.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27558b0 [0179.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x22) returned 0x27504a0 [0179.255] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0179.256] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a70 [0179.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x27504d0 [0179.256] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0179.256] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a80 [0179.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x20) returned 0x2750510 [0179.256] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0179.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a60 [0179.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x20) returned 0x2750538 [0179.257] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0179.257] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0179.257] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0179.257] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.258] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0179.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a50 [0179.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2a) returned 0x2750560 [0179.258] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0179.258] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0179.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27559e0 [0179.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2a) returned 0x2755720 [0179.258] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0179.259] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0179.259] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0179.259] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0179.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27559a0 [0179.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0x2755758 [0179.259] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0179.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27559d0 [0179.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0x27557a8 [0179.260] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0179.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27558f0 [0179.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3a) returned 0x27557e0 [0179.260] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0179.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a10 [0179.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0x2755828 [0179.260] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0179.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a20 [0179.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0x27513c0 [0179.260] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0179.261] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0179.261] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0179.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a00 [0179.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x2751410 [0179.261] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0179.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a30 [0179.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2751450 [0179.261] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0179.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27559b0 [0179.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0x2756278 [0179.261] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0 [0179.262] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0179.262] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0179.262] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.262] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec56df6d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec56df6d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0179.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27559c0 [0179.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3a) returned 0x2751490 [0179.262] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec358bc3, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec358bc3, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0179.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27558c0 [0179.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0x27514d8 [0179.263] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0179.263] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xec5ba381, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5ba381, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0179.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755a40 [0179.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3c) returned 0x2756698 [0179.263] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9377169, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9377169, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0179.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27559f0 [0179.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0x2755f18 [0179.264] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0179.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27558d0 [0179.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27566e0 [0179.264] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0179.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x27558e0 [0179.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x2756738 [0179.264] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0179.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755940 [0179.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0x2756790 [0179.264] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe940fc30, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe940fc30, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0179.265] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755900 [0179.265] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3e) returned 0x2756800 [0179.265] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xec4af2ab, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4af2ab, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0179.265] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755910 [0179.265] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x2756458 [0179.265] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9350e8d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9350e8d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0179.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755920 [0179.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2756848 [0179.309] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1abcca0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1abcca0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0179.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755930 [0179.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0x27568a0 [0179.309] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec4af2ab, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4af2ab, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0179.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755950 [0179.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x2756638 [0179.310] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec59b4f1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec59b4f1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0179.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755960 [0179.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0x27568f0 [0179.310] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0179.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755970 [0179.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0x2756960 [0179.310] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0179.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755980 [0179.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x27562d8 [0179.311] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec331bb1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec331bb1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0179.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2755990 [0179.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0x27569b0 [0179.311] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4fb610, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4fb610, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0179.311] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0179.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756a98 [0179.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0x27565d8 [0179.311] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0179.312] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0179.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfb7d6182, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xfb7d6182, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0179.313] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfb7d6182, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xfb7d6182, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.313] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0179.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c38 [0179.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3c) returned 0x2756e20 [0179.313] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0179.313] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9304c3a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9304c3a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0179.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b58 [0179.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x46) returned 0x2756e68 [0179.314] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe932aca9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe932aca9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0179.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756bc8 [0179.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0x2756eb8 [0179.314] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe9350e8d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9350e8d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0179.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b98 [0179.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0x2756ef0 [0179.314] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec5218dd, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5218dd, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0179.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ae8 [0179.315] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x2756f68 [0179.315] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0179.315] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756a78 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x42) returned 0x2757748 [0179.316] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b38 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2757798 [0179.316] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xec59b4f1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec59b4f1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756a48 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4c) returned 0x2757648 [0179.316] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756a68 [0179.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2e) returned 0x27577d8 [0179.316] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe9377169, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9377169, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c28 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0x2756fc0 [0179.317] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf1a70800, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1a70800, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b28 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2a) returned 0x2757810 [0179.317] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756a58 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0x2757848 [0179.317] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec331bb1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec331bb1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c08 [0179.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x7a) returned 0x2757898 [0179.318] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1a4a5d8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1a4a5d8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0179.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756af8 [0179.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3c) returned 0x2757920 [0179.318] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe939d36c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe939d36c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0179.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756a88 [0179.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4c) returned 0x2757018 [0179.318] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4d549a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4d549a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0179.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ba8 [0179.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0x2757968 [0179.318] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4fb610, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4fb610, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756be8 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x38) returned 0x27579d0 [0179.319] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756aa8 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4c) returned 0x2757540 [0179.319] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec5ba381, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5ba381, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ad8 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0x2755eb8 [0179.319] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec2e5526, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec2e5526, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b78 [0179.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0x2757a10 [0179.320] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1ab3770, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1ab3770, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0179.320] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0179.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756bf8 [0179.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3a) returned 0x2757a60 [0179.320] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0179.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ab8 [0179.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x46) returned 0x2757aa8 [0179.320] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0179.321] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0179.321] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0179.322] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.322] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.322] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0179.324] FindFirstFileW (in: lpFileName="C:\\Logs\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0180.342] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.129] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0181.130] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0181.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0181.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0181.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0181.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.141] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.143] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.154] CloseHandle (hObject=0x1f0) returned 1 [0181.156] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.156] SetEndOfFile (hFile=0x1e0) returned 1 [0181.156] MoveFileW (lpExistingFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), lpNewFileName="C:\\Logs\\Application.evtx.vhd" (normalized: "c:\\logs\\application.evtx.vhd")) returned 1 [0181.157] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0181.157] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0181.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0181.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0181.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0181.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.261] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.337] CloseHandle (hObject=0x1f0) returned 1 [0181.340] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.340] SetEndOfFile (hFile=0x1e0) returned 1 [0181.340] MoveFileW (lpExistingFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), lpNewFileName="C:\\Logs\\HardwareEvents.evtx.vhd" (normalized: "c:\\logs\\hardwareevents.evtx.vhd")) returned 1 [0181.341] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0181.341] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.349] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.349] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.349] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0181.349] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0181.349] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.349] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0181.349] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.349] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.349] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0181.349] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.349] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.350] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.350] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.350] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.350] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.350] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.350] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.351] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.351] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.351] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.431] CloseHandle (hObject=0x1f0) returned 1 [0181.434] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.434] SetEndOfFile (hFile=0x1e0) returned 1 [0181.444] MoveFileW (lpExistingFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), lpNewFileName="C:\\Logs\\Internet Explorer.evtx.vhd" (normalized: "c:\\logs\\internet explorer.evtx.vhd")) returned 1 [0181.451] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0181.451] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0181.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0181.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bd8 [0181.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bd8 | out: hHeap=0x2750000) returned 1 [0181.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.465] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.490] CloseHandle (hObject=0x1f0) returned 1 [0181.513] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.513] SetEndOfFile (hFile=0x1e0) returned 1 [0181.523] MoveFileW (lpExistingFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), lpNewFileName="C:\\Logs\\Key Management Service.evtx.vhd" (normalized: "c:\\logs\\key management service.evtx.vhd")) returned 1 [0181.523] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0181.523] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.532] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.532] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.532] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0181.532] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0181.532] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.532] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b48 [0181.532] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.533] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.533] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b48 | out: hHeap=0x2750000) returned 1 [0181.533] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.533] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.533] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.533] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.533] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.533] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.533] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.533] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.534] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.534] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.534] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.535] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.570] CloseHandle (hObject=0x1f0) returned 1 [0181.576] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.576] SetEndOfFile (hFile=0x1e0) returned 1 [0181.577] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.vhd")) returned 1 [0181.578] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0181.578] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.589] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.589] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.589] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0181.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0181.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0181.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0181.590] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.590] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.591] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.592] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.592] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.593] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.593] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.603] CloseHandle (hObject=0x1f0) returned 1 [0181.608] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.608] SetEndOfFile (hFile=0x1e0) returned 1 [0181.609] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.vhd")) returned 1 [0181.612] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0181.612] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0181.622] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0181.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0181.622] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0181.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.623] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.624] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.625] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.625] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.725] CloseHandle (hObject=0x1f0) returned 1 [0181.767] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.767] SetEndOfFile (hFile=0x1e0) returned 1 [0181.770] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.vhd")) returned 1 [0181.771] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0181.771] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0181.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0181.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0181.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0181.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.790] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.806] CloseHandle (hObject=0x1f0) returned 1 [0181.809] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.809] SetEndOfFile (hFile=0x1e0) returned 1 [0181.810] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.vhd")) returned 1 [0181.811] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0181.811] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.824] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.824] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.824] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0181.824] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0181.824] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.824] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b18 [0181.825] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.825] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.825] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b18 | out: hHeap=0x2750000) returned 1 [0181.825] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.825] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.825] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.825] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.825] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.825] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.826] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.826] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.827] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.827] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.827] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.844] CloseHandle (hObject=0x1f0) returned 1 [0181.847] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.847] SetEndOfFile (hFile=0x1e0) returned 1 [0181.847] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.vhd")) returned 1 [0181.848] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0181.849] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.905] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.905] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0181.906] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0181.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0181.906] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.906] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.906] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0181.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.907] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.908] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.908] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.922] CloseHandle (hObject=0x1f0) returned 1 [0181.935] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.935] SetEndOfFile (hFile=0x1e0) returned 1 [0181.936] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.vhd")) returned 1 [0181.936] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0181.937] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.949] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0181.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0181.949] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.949] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0181.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0181.950] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.950] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.950] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.950] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.950] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.950] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.951] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.951] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.969] CloseHandle (hObject=0x1f0) returned 1 [0181.972] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.972] SetEndOfFile (hFile=0x1e0) returned 1 [0181.973] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.vhd")) returned 1 [0181.973] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0181.974] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0181.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0181.984] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0181.984] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0181.985] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0181.985] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0181.985] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0181.985] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0181.985] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.985] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0181.985] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0181.985] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.985] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.986] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0181.986] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0181.986] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0181.986] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0181.986] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0181.986] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0181.987] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.987] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0181.987] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0181.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0181.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0181.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0181.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0181.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0181.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0181.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0181.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0181.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0181.999] CloseHandle (hObject=0x1f0) returned 1 [0182.002] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.002] SetEndOfFile (hFile=0x1e0) returned 1 [0182.002] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.vhd")) returned 1 [0182.003] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0182.003] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0182.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0182.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0182.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0182.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0182.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0182.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0182.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0182.030] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0182.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.030] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.030] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0182.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0182.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0182.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0182.031] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0182.031] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0182.033] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.033] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.033] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.033] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0182.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.048] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.049] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0182.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0182.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0182.062] CloseHandle (hObject=0x1f0) returned 1 [0182.066] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.066] SetEndOfFile (hFile=0x1e0) returned 1 [0182.067] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.vhd")) returned 1 [0182.067] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0182.068] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0182.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0182.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0182.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0182.081] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0182.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0182.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b48 [0182.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0182.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b48 | out: hHeap=0x2750000) returned 1 [0182.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.082] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0182.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0182.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0182.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0182.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0182.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0182.084] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.084] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.084] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.084] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0182.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.122] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.131] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0182.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0182.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0182.227] CloseHandle (hObject=0x1f0) returned 1 [0182.302] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.302] SetEndOfFile (hFile=0x1e0) returned 1 [0182.315] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.vhd")) returned 1 [0182.316] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0182.316] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0182.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.324] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0182.324] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0182.324] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0182.324] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0182.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0182.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0182.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0182.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0182.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.325] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0182.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0182.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0182.326] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0182.326] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0182.326] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0182.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0182.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0182.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0182.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0182.376] CloseHandle (hObject=0x1f0) returned 1 [0182.378] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.379] SetEndOfFile (hFile=0x1e0) returned 1 [0182.379] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.vhd")) returned 1 [0182.380] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0182.380] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0182.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0182.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0182.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0182.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0182.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0182.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0182.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0182.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0182.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0182.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0182.408] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.409] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.409] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0182.409] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0182.409] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0182.409] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0182.409] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0182.409] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0182.410] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.410] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0182.411] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0182.411] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0182.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.495] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.497] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.498] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.499] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.500] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.500] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.501] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.504] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.511] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.512] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.512] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.512] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.513] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0182.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0182.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0182.708] CloseHandle (hObject=0x1f0) returned 1 [0182.958] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0182.958] SetEndOfFile (hFile=0x1e0) returned 1 [0183.084] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.vhd")) returned 1 [0183.102] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0183.102] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0183.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0183.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0183.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0183.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0183.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0183.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0183.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b18 [0183.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0183.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0183.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b18 | out: hHeap=0x2750000) returned 1 [0183.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0183.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0183.130] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0183.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0183.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0183.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ed0 [0183.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0183.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ed0 | out: hHeap=0x2750000) returned 1 [0183.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0183.132] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0183.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0183.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0183.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0183.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0183.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0183.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0183.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0183.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0183.145] CloseHandle (hObject=0x1f0) returned 1 [0183.258] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0183.465] SetEndOfFile (hFile=0x1e0) returned 1 [0183.632] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.vhd")) returned 1 [0183.679] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0183.728] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0183.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0183.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0183.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0183.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.054] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.054] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.054] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0184.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0184.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757dd8 [0184.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0184.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757dd8 | out: hHeap=0x2750000) returned 1 [0184.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0184.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.140] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0184.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0184.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.302] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.387] CloseHandle (hObject=0x1f0) returned 1 [0184.392] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.392] SetEndOfFile (hFile=0x1e0) returned 1 [0184.411] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.vhd")) returned 1 [0184.413] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0184.413] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757228 [0184.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757228 | out: hHeap=0x2750000) returned 1 [0184.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0184.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.457] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0184.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.457] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.457] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0184.458] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.458] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0184.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.459] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.535] CloseHandle (hObject=0x1f0) returned 1 [0184.538] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.538] SetEndOfFile (hFile=0x1e0) returned 1 [0184.539] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.vhd")) returned 1 [0184.540] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0184.540] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0184.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0184.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b48 [0184.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b48 | out: hHeap=0x2750000) returned 1 [0184.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.554] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0184.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0184.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.575] CloseHandle (hObject=0x1f0) returned 1 [0184.590] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.591] SetEndOfFile (hFile=0x1e0) returned 1 [0184.593] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.vhd")) returned 1 [0184.594] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0184.594] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0184.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0184.616] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.616] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0184.616] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.616] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.616] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0184.616] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.616] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.617] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.617] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.617] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.617] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0184.617] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.617] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0184.618] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.619] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.619] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.619] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.634] CloseHandle (hObject=0x1f0) returned 1 [0184.637] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.637] SetEndOfFile (hFile=0x1e0) returned 1 [0184.638] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.vhd")) returned 1 [0184.639] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0184.639] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0184.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0184.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0184.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0184.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.669] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0184.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0184.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.671] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.684] CloseHandle (hObject=0x1f0) returned 1 [0184.687] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.687] SetEndOfFile (hFile=0x1e0) returned 1 [0184.687] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.vhd")) returned 1 [0184.688] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0184.688] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.718] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.718] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.718] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0184.718] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0184.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0184.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0184.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.719] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0184.720] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.720] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0184.721] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.721] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.721] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.721] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.731] CloseHandle (hObject=0x1f0) returned 1 [0184.734] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.734] SetEndOfFile (hFile=0x1e0) returned 1 [0184.735] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.vhd")) returned 1 [0184.736] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0184.736] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.752] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.753] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.753] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0184.753] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0184.753] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.753] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0184.753] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.753] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.754] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0184.754] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.754] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.754] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.754] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.754] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.754] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0184.755] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.755] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0184.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.772] CloseHandle (hObject=0x1f0) returned 1 [0184.776] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.776] SetEndOfFile (hFile=0x1e0) returned 1 [0184.777] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.vhd")) returned 1 [0184.778] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0184.778] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0184.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0184.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0184.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0184.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.792] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.793] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0184.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0184.794] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.794] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.794] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.794] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.813] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.819] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.819] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.819] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.819] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.820] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.903] CloseHandle (hObject=0x1f0) returned 1 [0184.930] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.930] SetEndOfFile (hFile=0x1e0) returned 1 [0184.938] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.vhd")) returned 1 [0184.939] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0184.939] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.956] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.956] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.956] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0184.956] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0184.956] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.956] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0184.956] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.957] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.957] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0184.957] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.957] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.957] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.957] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.957] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.957] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0184.958] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.958] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0184.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0184.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0184.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0184.975] CloseHandle (hObject=0x1f0) returned 1 [0184.978] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.978] SetEndOfFile (hFile=0x1e0) returned 1 [0184.978] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.vhd")) returned 1 [0184.979] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0184.979] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0184.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0184.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0184.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0184.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0184.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757228 [0184.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757228 | out: hHeap=0x2750000) returned 1 [0184.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0184.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0184.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0184.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0184.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.993] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0184.993] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0184.993] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0184.993] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0184.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0184.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0184.995] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.995] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0184.995] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0184.995] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0184.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0184.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0184.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0184.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0184.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.013] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.013] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.016] CloseHandle (hObject=0x1f0) returned 1 [0185.020] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.020] SetEndOfFile (hFile=0x1e0) returned 1 [0185.035] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.vhd")) returned 1 [0185.036] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0185.036] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0185.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0185.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0185.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0185.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.053] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0185.054] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.054] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0185.055] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.055] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.055] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.073] CloseHandle (hObject=0x1f0) returned 1 [0185.078] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.078] SetEndOfFile (hFile=0x1e0) returned 1 [0185.090] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.vhd")) returned 1 [0185.091] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0185.091] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0185.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0185.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0185.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0185.104] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.105] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0185.105] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.105] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0185.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.117] CloseHandle (hObject=0x1f0) returned 1 [0185.131] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.131] SetEndOfFile (hFile=0x1e0) returned 1 [0185.145] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.vhd")) returned 1 [0185.147] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0185.147] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0185.170] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0185.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0185.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0185.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.171] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0185.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0185.173] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.173] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.173] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.173] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.187] CloseHandle (hObject=0x1f0) returned 1 [0185.192] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.192] SetEndOfFile (hFile=0x1e0) returned 1 [0185.194] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.vhd")) returned 1 [0185.207] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0185.207] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0185.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0185.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0185.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0185.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.220] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0185.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0185.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.235] CloseHandle (hObject=0x1f0) returned 1 [0185.237] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.238] SetEndOfFile (hFile=0x1e0) returned 1 [0185.238] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.vhd")) returned 1 [0185.239] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0185.239] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0185.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0185.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0185.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0185.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.290] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0185.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0185.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.301] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.302] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.302] CloseHandle (hObject=0x1f0) returned 1 [0185.305] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.305] SetEndOfFile (hFile=0x1e0) returned 1 [0185.305] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.vhd")) returned 1 [0185.306] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0185.306] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0185.319] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0185.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0185.319] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.319] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.319] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0185.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.319] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.320] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0185.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0185.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.362] CloseHandle (hObject=0x1f0) returned 1 [0185.365] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.365] SetEndOfFile (hFile=0x1e0) returned 1 [0185.366] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.vhd")) returned 1 [0185.367] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0185.367] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0185.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b68 [0185.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b68 | out: hHeap=0x2750000) returned 1 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.375] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0185.376] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.376] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0185.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.390] CloseHandle (hObject=0x1f0) returned 1 [0185.393] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.393] SetEndOfFile (hFile=0x1e0) returned 1 [0185.413] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.vhd")) returned 1 [0185.414] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0185.414] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0185.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0185.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bd8 [0185.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bd8 | out: hHeap=0x2750000) returned 1 [0185.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.429] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0185.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0185.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.430] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.441] CloseHandle (hObject=0x1f0) returned 1 [0185.444] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.444] SetEndOfFile (hFile=0x1e0) returned 1 [0185.444] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.vhd")) returned 1 [0185.445] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0185.446] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0185.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0185.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b68 [0185.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b68 | out: hHeap=0x2750000) returned 1 [0185.559] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.559] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.559] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.559] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.560] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0185.560] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.560] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0185.561] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.561] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.561] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.561] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.612] CloseHandle (hObject=0x1f0) returned 1 [0185.620] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.620] SetEndOfFile (hFile=0x1e0) returned 1 [0185.621] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.vhd")) returned 1 [0185.622] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0185.622] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0185.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0185.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0185.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0185.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0185.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0185.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0185.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0185.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0185.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.669] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0185.670] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0185.670] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0185.670] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0185.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0185.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0185.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.671] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0185.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0185.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0185.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0185.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0185.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0185.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0185.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0185.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0185.771] CloseHandle (hObject=0x1f0) returned 1 [0185.773] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0185.774] SetEndOfFile (hFile=0x1e0) returned 1 [0185.880] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.vhd")) returned 1 [0185.881] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0185.881] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0185.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0185.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0186.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0186.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0186.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0186.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0186.666] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0186.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0186.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b48 [0186.666] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0186.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0186.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b48 | out: hHeap=0x2750000) returned 1 [0186.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0186.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0186.667] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0186.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0186.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0186.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0186.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0186.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0186.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0186.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0186.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0186.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0186.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.783] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.813] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0186.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0186.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0186.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0186.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0186.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0186.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0186.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0186.972] CloseHandle (hObject=0x1f0) returned 1 [0187.173] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.173] SetEndOfFile (hFile=0x1e0) returned 1 [0187.298] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.vhd")) returned 1 [0187.308] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0187.309] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.309] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0187.316] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0187.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.316] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0187.316] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.316] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0187.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.317] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0187.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0187.318] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.318] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.318] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.318] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.327] CloseHandle (hObject=0x1f0) returned 1 [0187.332] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.332] SetEndOfFile (hFile=0x1e0) returned 1 [0187.332] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.vhd")) returned 1 [0187.349] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0187.349] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.357] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.357] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.357] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0187.357] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0187.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0187.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0187.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.358] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0187.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0187.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.369] CloseHandle (hObject=0x1f0) returned 1 [0187.372] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.372] SetEndOfFile (hFile=0x1e0) returned 1 [0187.372] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.vhd")) returned 1 [0187.373] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0187.373] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0187.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0187.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0187.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0187.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.381] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.381] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.381] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.381] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0187.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0187.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.399] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.405] CloseHandle (hObject=0x1f0) returned 1 [0187.408] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.408] SetEndOfFile (hFile=0x1e0) returned 1 [0187.409] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.vhd")) returned 1 [0187.410] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0187.410] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0187.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0187.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0187.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0187.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.422] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0187.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0187.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.433] CloseHandle (hObject=0x1f0) returned 1 [0187.436] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.436] SetEndOfFile (hFile=0x1e0) returned 1 [0187.436] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.vhd")) returned 1 [0187.437] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0187.437] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.514] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.514] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.515] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.515] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0187.516] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.516] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.516] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.516] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.522] CloseHandle (hObject=0x1f0) returned 1 [0187.528] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.529] SetEndOfFile (hFile=0x1e0) returned 1 [0187.529] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.vhd")) returned 1 [0187.529] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0187.530] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0187.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0187.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0187.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0187.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.539] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0187.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0187.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.541] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.541] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.541] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.588] CloseHandle (hObject=0x1f0) returned 1 [0187.592] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.592] SetEndOfFile (hFile=0x1e0) returned 1 [0187.593] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.vhd")) returned 1 [0187.594] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0187.594] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0187.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0187.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0187.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0187.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.605] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0187.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0187.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.607] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.614] CloseHandle (hObject=0x1f0) returned 1 [0187.618] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.618] SetEndOfFile (hFile=0x1e0) returned 1 [0187.618] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.vhd")) returned 1 [0187.619] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0187.619] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.671] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.671] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.671] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0187.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0187.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0187.672] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.672] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.672] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0187.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.672] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.672] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0187.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0187.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.682] CloseHandle (hObject=0x1f0) returned 1 [0187.740] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.740] SetEndOfFile (hFile=0x1e0) returned 1 [0187.833] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.vhd")) returned 1 [0187.834] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0187.835] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0187.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0187.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b18 [0187.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b18 | out: hHeap=0x2750000) returned 1 [0187.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.859] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.859] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0187.859] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.859] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0187.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.861] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.861] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.886] CloseHandle (hObject=0x1f0) returned 1 [0187.890] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.890] SetEndOfFile (hFile=0x1e0) returned 1 [0187.890] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.vhd")) returned 1 [0187.891] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0187.891] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0187.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0187.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0187.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0187.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.973] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0187.973] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0187.973] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0187.975] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.975] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.975] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0187.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0187.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0187.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0187.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0187.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0187.985] CloseHandle (hObject=0x1f0) returned 1 [0187.988] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0187.988] SetEndOfFile (hFile=0x1e0) returned 1 [0187.988] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.vhd")) returned 1 [0187.989] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0187.989] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0187.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0187.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0187.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0187.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0187.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0187.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0187.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0187.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0187.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0187.999] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0187.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0188.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0188.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.045] CloseHandle (hObject=0x1f0) returned 1 [0188.048] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.048] SetEndOfFile (hFile=0x1e0) returned 1 [0188.049] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.vhd")) returned 1 [0188.050] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0188.050] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.063] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.063] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.065] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.066] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757228 [0188.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757228 | out: hHeap=0x2750000) returned 1 [0188.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b18 [0188.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b18 | out: hHeap=0x2750000) returned 1 [0188.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.070] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.070] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.070] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.070] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0188.070] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.070] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0188.071] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.071] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.071] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.072] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.121] CloseHandle (hObject=0x1f0) returned 1 [0188.124] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.124] SetEndOfFile (hFile=0x1e0) returned 1 [0188.124] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.vhd")) returned 1 [0188.125] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0188.125] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0188.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0188.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0188.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0188.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.238] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0188.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.239] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0188.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.265] CloseHandle (hObject=0x1f0) returned 1 [0188.275] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.275] SetEndOfFile (hFile=0x1e0) returned 1 [0188.275] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.vhd")) returned 1 [0188.336] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0188.336] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0188.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0188.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0188.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0188.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.345] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0188.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0188.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.347] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.356] CloseHandle (hObject=0x1f0) returned 1 [0188.358] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.358] SetEndOfFile (hFile=0x1e0) returned 1 [0188.359] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.vhd")) returned 1 [0188.359] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0188.360] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0188.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0188.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b48 [0188.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b48 | out: hHeap=0x2750000) returned 1 [0188.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.427] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0188.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0188.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.437] CloseHandle (hObject=0x1f0) returned 1 [0188.440] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.440] SetEndOfFile (hFile=0x1e0) returned 1 [0188.440] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.vhd")) returned 1 [0188.441] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0188.441] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0188.575] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0188.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0188.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0188.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.576] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0188.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.577] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0188.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.578] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.587] CloseHandle (hObject=0x1f0) returned 1 [0188.592] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.592] SetEndOfFile (hFile=0x1e0) returned 1 [0188.593] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.vhd")) returned 1 [0188.593] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0188.594] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0188.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0188.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0188.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0188.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.604] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0188.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0188.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.606] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.783] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.783] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.852] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.856] CloseHandle (hObject=0x1f0) returned 1 [0188.905] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.906] SetEndOfFile (hFile=0x1e0) returned 1 [0188.951] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.vhd")) returned 1 [0188.952] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0188.952] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0188.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0188.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0188.964] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0188.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0188.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bd8 [0188.965] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.965] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0188.965] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bd8 | out: hHeap=0x2750000) returned 1 [0188.965] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.965] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.965] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0188.965] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0188.965] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0188.965] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0188.966] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0188.966] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0188.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.967] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0188.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0188.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0188.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0188.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0188.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0188.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0188.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0188.980] CloseHandle (hObject=0x1f0) returned 1 [0188.983] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0188.983] SetEndOfFile (hFile=0x1e0) returned 1 [0188.983] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.vhd")) returned 1 [0188.985] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0188.985] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0188.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0188.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0188.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0188.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0189.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0189.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0189.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0189.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.234] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0189.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0189.235] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.245] CloseHandle (hObject=0x1f0) returned 1 [0189.248] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.248] SetEndOfFile (hFile=0x1e0) returned 1 [0189.249] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.vhd")) returned 1 [0189.250] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0189.250] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0189.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0189.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0189.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0189.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.263] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0189.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0189.264] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.264] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.264] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.316] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.319] CloseHandle (hObject=0x1f0) returned 1 [0189.324] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.324] SetEndOfFile (hFile=0x1e0) returned 1 [0189.324] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.vhd")) returned 1 [0189.325] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0189.325] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0189.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0189.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0189.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0189.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.332] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0189.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0189.335] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.335] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.335] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.335] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.342] CloseHandle (hObject=0x1f0) returned 1 [0189.344] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.344] SetEndOfFile (hFile=0x1e0) returned 1 [0189.345] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.vhd")) returned 1 [0189.345] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0189.345] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0189.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0189.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0189.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0189.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.354] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0189.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0189.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.399] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.406] CloseHandle (hObject=0x1f0) returned 1 [0189.408] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.409] SetEndOfFile (hFile=0x1e0) returned 1 [0189.409] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.vhd")) returned 1 [0189.410] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0189.410] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0189.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0189.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0189.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0189.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.425] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0189.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0189.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.480] CloseHandle (hObject=0x1f0) returned 1 [0189.484] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.484] SetEndOfFile (hFile=0x1e0) returned 1 [0189.631] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.vhd")) returned 1 [0189.632] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0189.633] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.635] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.636] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.638] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757228 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757228 | out: hHeap=0x2750000) returned 1 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.639] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.639] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.639] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0189.640] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.640] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.640] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.640] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.647] CloseHandle (hObject=0x1f0) returned 1 [0189.652] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.652] SetEndOfFile (hFile=0x1e0) returned 1 [0189.652] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.vhd")) returned 1 [0189.653] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0189.653] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0189.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0189.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0189.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0189.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.730] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0189.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0189.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.732] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.740] CloseHandle (hObject=0x1f0) returned 1 [0189.742] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.742] SetEndOfFile (hFile=0x1e0) returned 1 [0189.742] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.vhd")) returned 1 [0189.743] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0189.743] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0189.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0189.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.749] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0189.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0189.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.751] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.751] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.753] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.761] CloseHandle (hObject=0x1f0) returned 1 [0189.768] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.768] SetEndOfFile (hFile=0x1e0) returned 1 [0189.769] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.vhd")) returned 1 [0189.825] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0189.826] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.837] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.837] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.837] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0189.837] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0189.837] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.837] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b68 [0189.837] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.837] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.838] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b68 | out: hHeap=0x2750000) returned 1 [0189.838] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.838] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.838] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.838] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.838] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.838] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0189.838] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.839] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0189.840] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.840] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.840] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.840] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.850] CloseHandle (hObject=0x1f0) returned 1 [0189.857] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.857] SetEndOfFile (hFile=0x1e0) returned 1 [0189.857] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.vhd")) returned 1 [0189.858] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0189.858] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0189.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0189.942] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0189.942] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0189.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0189.942] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0189.942] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0189.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0189.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0189.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.943] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.943] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0189.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0189.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0189.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0189.943] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0189.943] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0189.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0189.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0189.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0189.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0189.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0189.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0189.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0189.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0189.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0189.956] CloseHandle (hObject=0x1f0) returned 1 [0189.960] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0189.960] SetEndOfFile (hFile=0x1e0) returned 1 [0189.960] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.vhd")) returned 1 [0189.961] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0189.961] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0189.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0189.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.023] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0190.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0190.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0190.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0190.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.025] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0190.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0190.027] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.027] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.027] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.027] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.041] CloseHandle (hObject=0x1f0) returned 1 [0190.044] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.044] SetEndOfFile (hFile=0x1e0) returned 1 [0190.045] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.vhd")) returned 1 [0190.045] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0190.046] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.046] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.059] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0190.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0190.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0190.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0190.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.061] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.061] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0190.061] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.062] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0190.063] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.063] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.063] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.063] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.063] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.138] CloseHandle (hObject=0x1f0) returned 1 [0190.144] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.145] SetEndOfFile (hFile=0x1e0) returned 1 [0190.149] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.vhd")) returned 1 [0190.150] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0190.150] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0190.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0190.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0190.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0190.164] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.164] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.164] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.164] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.164] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0190.165] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.165] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0190.166] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.166] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.166] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.166] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.226] CloseHandle (hObject=0x1f0) returned 1 [0190.232] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.232] SetEndOfFile (hFile=0x1e0) returned 1 [0190.236] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.vhd")) returned 1 [0190.236] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0190.237] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.248] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.248] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.249] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0190.249] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0190.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0190.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0190.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.253] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0190.253] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.253] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0190.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.365] CloseHandle (hObject=0x1f0) returned 1 [0190.367] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.368] SetEndOfFile (hFile=0x1e0) returned 1 [0190.368] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.vhd")) returned 1 [0190.369] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0190.369] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0190.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0190.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.380] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0190.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0190.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.394] CloseHandle (hObject=0x1f0) returned 1 [0190.402] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.402] SetEndOfFile (hFile=0x1e0) returned 1 [0190.402] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.vhd")) returned 1 [0190.403] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0190.403] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0190.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b68 [0190.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b68 | out: hHeap=0x2750000) returned 1 [0190.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.474] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.474] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0190.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0190.475] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.475] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.475] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.475] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.485] CloseHandle (hObject=0x1f0) returned 1 [0190.489] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.489] SetEndOfFile (hFile=0x1e0) returned 1 [0190.489] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.vhd")) returned 1 [0190.490] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0190.490] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.506] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.506] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.506] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0190.506] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.507] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bd8 [0190.507] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.507] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.507] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bd8 | out: hHeap=0x2750000) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.507] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.507] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.507] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.508] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.508] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0190.508] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.508] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0190.509] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.509] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.509] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.509] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.655] CloseHandle (hObject=0x1f0) returned 1 [0190.658] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.658] SetEndOfFile (hFile=0x1e0) returned 1 [0190.658] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.vhd")) returned 1 [0190.659] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0190.659] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.668] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0190.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0190.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b68 [0190.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b68 | out: hHeap=0x2750000) returned 1 [0190.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.669] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.670] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.670] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0190.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0190.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.671] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.671] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.686] CloseHandle (hObject=0x1f0) returned 1 [0190.692] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.692] SetEndOfFile (hFile=0x1e0) returned 1 [0190.693] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.vhd")) returned 1 [0190.694] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0190.694] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0190.796] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0190.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.796] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0190.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0190.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.797] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.797] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.797] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0190.798] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.798] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0190.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.837] CloseHandle (hObject=0x1f0) returned 1 [0190.841] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.841] SetEndOfFile (hFile=0x1e0) returned 1 [0190.841] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.vhd")) returned 1 [0190.842] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0190.842] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0190.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b48 [0190.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b48 | out: hHeap=0x2750000) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.855] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0190.856] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.856] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0190.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.917] CloseHandle (hObject=0x1f0) returned 1 [0190.929] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.929] SetEndOfFile (hFile=0x1e0) returned 1 [0190.929] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.vhd")) returned 1 [0190.929] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0190.930] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0190.935] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0190.935] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.935] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0190.935] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.935] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.935] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0190.935] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0190.936] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0190.936] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0190.936] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0190.936] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0190.936] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.937] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0190.937] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0190.937] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0190.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0190.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0190.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0190.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0190.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0190.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0190.943] CloseHandle (hObject=0x1f0) returned 1 [0190.948] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0190.948] SetEndOfFile (hFile=0x1e0) returned 1 [0190.948] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.vhd")) returned 1 [0190.949] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0190.949] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0190.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0190.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0191.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0191.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0191.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0191.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0191.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.020] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0191.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0191.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0191.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0191.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0191.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0191.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0191.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0191.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0191.035] CloseHandle (hObject=0x1f0) returned 1 [0191.056] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.056] SetEndOfFile (hFile=0x1e0) returned 1 [0191.056] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.vhd")) returned 1 [0191.058] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0191.058] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0191.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.126] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0191.126] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0191.127] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0191.127] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0191.127] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0191.127] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756bb8 [0191.127] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.127] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0191.127] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756bb8 | out: hHeap=0x2750000) returned 1 [0191.127] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.127] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.128] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0191.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0191.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0191.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0191.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0191.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0191.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0191.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0191.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0191.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0191.179] CloseHandle (hObject=0x1f0) returned 1 [0191.182] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.183] SetEndOfFile (hFile=0x1e0) returned 1 [0191.183] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.vhd")) returned 1 [0191.184] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0191.184] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0191.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0191.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0191.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0191.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0191.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0191.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0191.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0191.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0191.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.210] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0191.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0191.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0191.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0191.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0191.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0191.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0191.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0191.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0191.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0191.464] CloseHandle (hObject=0x1f0) returned 1 [0191.467] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.467] SetEndOfFile (hFile=0x1e0) returned 1 [0191.699] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.vhd")) returned 1 [0191.700] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0191.700] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0191.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0191.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0191.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0191.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0191.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0191.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0191.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0191.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0191.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0191.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0191.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.726] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0191.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0191.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0191.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0191.727] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0191.727] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0191.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0191.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0191.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0191.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0191.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.946] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0191.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0191.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0191.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.049] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.050] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.052] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.052] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.122] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0192.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0192.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0192.131] CloseHandle (hObject=0x1f0) returned 1 [0192.172] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.172] SetEndOfFile (hFile=0x1e0) returned 1 [0192.183] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.vhd")) returned 1 [0192.184] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0192.184] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0192.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0192.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0192.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0192.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0192.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0192.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0192.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0192.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.199] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.199] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0192.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0192.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0192.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0192.199] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0192.199] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0192.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.201] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0192.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.253] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.256] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0192.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0192.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0192.258] CloseHandle (hObject=0x1f0) returned 1 [0192.261] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.261] SetEndOfFile (hFile=0x1e0) returned 1 [0192.280] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.vhd")) returned 1 [0192.281] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0192.281] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0192.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.282] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0192.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0192.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0192.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0192.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0192.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0192.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0192.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.292] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0192.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0192.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0192.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0192.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0192.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0192.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0192.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.301] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.302] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.302] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.302] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0192.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0192.303] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0192.304] CloseHandle (hObject=0x1f0) returned 1 [0192.307] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.307] SetEndOfFile (hFile=0x1e0) returned 1 [0192.307] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.vhd")) returned 1 [0192.308] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0192.308] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0192.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0192.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b08 [0192.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0192.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b08 | out: hHeap=0x2750000) returned 1 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.320] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0192.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0192.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0192.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0192.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0192.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0192.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.369] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.370] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.370] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.511] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.511] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.512] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.512] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.512] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.513] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0192.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0192.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0192.581] CloseHandle (hObject=0x1f0) returned 1 [0192.655] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.655] SetEndOfFile (hFile=0x1e0) returned 1 [0192.894] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.vhd" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.vhd")) returned 1 [0192.895] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0192.895] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0192.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0192.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0192.910] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0192.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0192.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0192.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0192.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0192.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756ac8 [0192.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0192.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756ac8 | out: hHeap=0x2750000) returned 1 [0192.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.912] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0192.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0192.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0192.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0192.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0192.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0192.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0192.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0192.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0192.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0192.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.984] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0192.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0192.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0192.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.003] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.003] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.003] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.085] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0193.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0193.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0193.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0193.165] CloseHandle (hObject=0x1f0) returned 1 [0193.244] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.244] SetEndOfFile (hFile=0x1e0) returned 1 [0193.346] MoveFileW (lpExistingFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), lpNewFileName="C:\\Logs\\Security.evtx.vhd" (normalized: "c:\\logs\\security.evtx.vhd")) returned 1 [0193.347] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0193.348] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0193.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0193.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0193.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0193.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0193.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b68 [0193.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0193.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b68 | out: hHeap=0x2750000) returned 1 [0193.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0193.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.357] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0193.357] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0193.357] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0193.357] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0193.357] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0193.357] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0193.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0193.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0193.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0193.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0193.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0193.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0193.368] CloseHandle (hObject=0x1f0) returned 1 [0193.372] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.372] SetEndOfFile (hFile=0x1e0) returned 1 [0193.372] MoveFileW (lpExistingFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), lpNewFileName="C:\\Logs\\Setup.evtx.vhd" (normalized: "c:\\logs\\setup.evtx.vhd")) returned 1 [0193.373] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0193.373] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0193.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0193.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0193.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0193.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0193.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0193.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0193.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0193.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756b88 [0193.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0193.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756b88 | out: hHeap=0x2750000) returned 1 [0193.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0193.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.383] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0193.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0193.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0193.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0193.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0193.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0193.384] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0193.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0193.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0193.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.672] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.753] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0193.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0193.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0193.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0193.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0193.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0193.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0193.757] CloseHandle (hObject=0x1f0) returned 1 [0193.846] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0193.847] SetEndOfFile (hFile=0x1e0) returned 1 [0194.013] MoveFileW (lpExistingFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), lpNewFileName="C:\\Logs\\System.evtx.vhd" (normalized: "c:\\logs\\system.evtx.vhd")) returned 1 [0194.014] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0194.014] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0194.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0194.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0194.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757af8 [0194.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2757c70 [0194.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0194.218] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0194.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2758ed8 [0194.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756c18 [0194.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0194.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758ed8 | out: hHeap=0x2750000) returned 1 [0194.219] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756c18 | out: hHeap=0x2750000) returned 1 [0194.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0194.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0194.298] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0194.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757c70 [0194.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2757cc0 [0194.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0194.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757cc0 | out: hHeap=0x2750000) returned 1 [0194.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0194.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0194.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757c70 [0194.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757c70 | out: hHeap=0x2750000) returned 1 [0194.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757af8 | out: hHeap=0x2750000) returned 1 [0194.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0194.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0194.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0194.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0194.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0194.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0194.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0194.736] CloseHandle (hObject=0x1f0) returned 1 [0194.823] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0194.992] SetEndOfFile (hFile=0x1e0) returned 1 [0195.148] MoveFileW (lpExistingFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), lpNewFileName="C:\\Logs\\Windows PowerShell.evtx.vhd" (normalized: "c:\\logs\\windows powershell.evtx.vhd")) returned 1 [0195.235] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0195.417] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0195.594] FindFirstFileW (in: lpFileName="C:\\ESD\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0195.642] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.642] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.642] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0195.642] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0195.645] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.646] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0195.646] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ac8 [0195.646] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757af8 [0195.646] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0195.646] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756bd8 [0195.646] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757b38 [0195.646] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0195.646] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b08 [0195.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757b78 [0195.647] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0195.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b18 [0195.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757bb8 [0195.647] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0195.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b48 [0195.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757bf8 [0195.647] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0195.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b68 [0195.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757c38 [0195.648] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0195.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756b88 [0195.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2757c78 [0195.648] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0195.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756bb8 [0195.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759400 [0195.649] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0195.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c18 [0195.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759200 [0195.649] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0195.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756e08 [0195.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2758f00 [0195.649] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0195.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d08 [0195.650] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759340 [0195.650] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0195.650] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c48 [0195.650] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759080 [0195.650] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0195.650] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c98 [0195.650] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759280 [0195.650] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0195.651] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c58 [0195.651] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x27590c0 [0195.651] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0195.651] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c68 [0195.651] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x27592c0 [0195.651] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0195.651] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756dc8 [0195.651] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759100 [0195.651] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0195.652] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756dd8 [0195.652] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759540 [0195.652] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0195.652] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c78 [0195.652] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x27595c0 [0195.652] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0195.652] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756cb8 [0195.652] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759600 [0195.653] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0195.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d58 [0195.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759300 [0195.653] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0195.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756c88 [0195.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759040 [0195.653] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0195.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ca8 [0195.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759140 [0195.654] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0195.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d18 [0195.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759180 [0195.654] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0195.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756cc8 [0195.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759580 [0195.654] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0195.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756ce8 [0195.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2758f40 [0195.655] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0195.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d88 [0195.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3a) returned 0x2757cb8 [0195.655] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0195.655] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0195.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0195.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.946] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757d00 [0195.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27596e0 [0195.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0195.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0195.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759848 [0195.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0195.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0195.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759848 | out: hHeap=0x2750000) returned 1 [0195.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0195.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27596e0 [0195.948] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0195.948] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0195.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757e78 [0195.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27596e0 [0195.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0195.948] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0195.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0195.950] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757e78 | out: hHeap=0x2750000) returned 1 [0195.950] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27596e0 [0195.950] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0195.950] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d00 | out: hHeap=0x2750000) returned 1 [0195.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0195.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0195.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ef6, lpOverlapped=0x0) returned 1 [0195.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe10a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f00, lpOverlapped=0x0) returned 1 [0195.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0195.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0195.955] CloseHandle (hObject=0x1f0) returned 1 [0195.960] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0195.960] SetEndOfFile (hFile=0x1e0) returned 1 [0195.961] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), lpNewFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.vhd" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.vhd")) returned 1 [0195.962] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0195.962] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0195.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0195.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0195.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0195.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x2757d00 [0195.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x27596e0 [0195.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0195.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0195.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759848 [0195.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0195.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0196.035] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759848 | out: hHeap=0x2750000) returned 1 [0196.035] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0196.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27596e0 [0196.035] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0196.035] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0196.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757e78 [0196.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x27596e0 [0196.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0196.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0196.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0196.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757e78 | out: hHeap=0x2750000) returned 1 [0196.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27596e0 [0196.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0196.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d00 | out: hHeap=0x2750000) returned 1 [0196.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19d5, lpOverlapped=0x0) returned 1 [0196.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe62b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19e0, lpOverlapped=0x0) returned 1 [0196.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0196.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0196.068] CloseHandle (hObject=0x1f0) returned 1 [0196.072] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.072] SetEndOfFile (hFile=0x1e0) returned 1 [0196.073] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), lpNewFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.vhd")) returned 1 [0196.073] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0196.074] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d68 [0196.074] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3e) returned 0x2757d00 [0196.074] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0196.074] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d38 [0196.074] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3e) returned 0x2757d48 [0196.074] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0196.074] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0196.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0196.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.085] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0196.086] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0196.086] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0196.086] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.086] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0196.086] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.086] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0196.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0196.087] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0196.087] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0196.087] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0196.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0196.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0196.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe2c, lpOverlapped=0x0) returned 1 [0196.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe30, lpOverlapped=0x0) returned 1 [0196.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0196.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0196.089] CloseHandle (hObject=0x1f0) returned 1 [0196.090] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.091] SetEndOfFile (hFile=0x1e0) returned 1 [0196.091] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\header.bmp.vhd" (normalized: "c:\\588bce7c90097ed212\\header.bmp.vhd")) returned 1 [0196.092] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0196.092] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0196.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.160] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0196.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0196.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0196.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0196.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0196.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0196.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d98 [0196.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0196.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d98 | out: hHeap=0x2750000) returned 1 [0196.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0196.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.162] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0196.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0196.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0196.162] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0196.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0196.162] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0196.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0196.163] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0196.164] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0196.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0196.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.228] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.228] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.228] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.249] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.253] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.253] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.256] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.256] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.261] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.270] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.504] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.511] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.511] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.512] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0196.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0196.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0196.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0200.400] CloseHandle (hObject=0x1f0) returned 1 [0201.412] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.416] SetEndOfFile (hFile=0x1e0) returned 1 [0201.508] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.vhd")) returned 1 [0201.509] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0201.509] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0201.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0201.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0201.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0201.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0201.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0201.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0201.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0201.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0201.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0201.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0201.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0201.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0201.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0201.523] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0201.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0201.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0201.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0201.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0201.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0201.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0201.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0201.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0201.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0201.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0201.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.640] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.753] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.753] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0201.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0201.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.079] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.079] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.080] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.085] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x200, lpOverlapped=0x0) returned 1 [0202.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x200, lpOverlapped=0x0) returned 1 [0202.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0202.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0202.101] CloseHandle (hObject=0x1f0) returned 1 [0202.309] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.309] SetEndOfFile (hFile=0x1e0) returned 1 [0202.405] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.vhd")) returned 1 [0202.406] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0202.406] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0202.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0202.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0202.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0202.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0202.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0202.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0202.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0202.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0202.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0202.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0202.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0202.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0202.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0202.422] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0202.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0202.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0202.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0202.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0202.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0202.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0202.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0202.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0202.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0202.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.800] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0202.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0202.800] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0202.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0202.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0202.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0202.802] CloseHandle (hObject=0x1f0) returned 1 [0202.876] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0202.876] SetEndOfFile (hFile=0x1e0) returned 1 [0203.091] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.vhd")) returned 1 [0203.092] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0203.092] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0203.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0203.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0203.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0203.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757228 [0203.101] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757228 | out: hHeap=0x2750000) returned 1 [0203.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0203.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0203.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0203.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0203.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0203.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0203.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0203.102] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0203.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0203.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0203.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0203.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0203.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0203.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0203.104] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0203.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0203.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0203.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0203.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.391] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.391] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.392] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.392] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.392] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.393] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.394] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.394] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.394] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.394] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.395] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.395] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.395] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.396] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.396] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.399] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.400] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.783] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.813] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.813] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0203.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0203.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0203.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.052] CloseHandle (hObject=0x1f0) returned 1 [0211.498] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.498] SetEndOfFile (hFile=0x1e0) returned 1 [0211.507] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.vhd")) returned 1 [0211.508] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0211.508] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0211.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0211.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0211.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0211.521] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0211.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0211.521] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.521] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0211.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.522] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0211.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0211.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0211.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0211.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0211.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0211.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0211.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0211.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0211.609] CloseHandle (hObject=0x1f0) returned 1 [0211.627] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.627] SetEndOfFile (hFile=0x1e0) returned 1 [0211.635] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.vhd")) returned 1 [0211.636] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0211.637] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0211.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.645] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0211.645] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0211.645] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0211.645] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0211.645] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.645] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0211.645] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.645] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0211.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.738] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0211.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0211.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0211.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0211.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0211.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.740] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.740] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0211.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.753] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0211.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0211.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0211.791] CloseHandle (hObject=0x1f0) returned 1 [0211.813] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.813] SetEndOfFile (hFile=0x1e0) returned 1 [0211.850] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.vhd")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0211.851] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0211.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.857] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0211.857] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.857] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0211.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0211.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6ae, lpOverlapped=0x0) returned 1 [0211.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff952, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6b0, lpOverlapped=0x0) returned 1 [0211.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0211.887] CloseHandle (hObject=0x1f0) returned 1 [0211.892] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.893] SetEndOfFile (hFile=0x1e0) returned 1 [0211.903] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.vhd")) returned 1 [0211.904] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0211.904] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0211.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0211.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0211.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0211.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0211.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0211.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0211.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.912] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0211.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0211.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0211.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0211.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0211.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0211.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.924] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1200, lpOverlapped=0x0) returned 1 [0211.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1200, lpOverlapped=0x0) returned 1 [0211.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0211.962] CloseHandle (hObject=0x1f0) returned 1 [0211.967] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.967] SetEndOfFile (hFile=0x1e0) returned 1 [0211.967] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.vhd")) returned 1 [0211.968] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0211.968] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0211.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0211.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0211.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0211.980] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0211.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d98 [0211.980] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.980] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.980] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d98 | out: hHeap=0x2750000) returned 1 [0211.981] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.981] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0211.981] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0211.981] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0211.981] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0211.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0211.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0211.982] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.982] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0211.982] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0211.982] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0211.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.984] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0211.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0211.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1200, lpOverlapped=0x0) returned 1 [0211.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1200, lpOverlapped=0x0) returned 1 [0211.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0211.992] CloseHandle (hObject=0x1f0) returned 1 [0211.995] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0211.995] SetEndOfFile (hFile=0x1e0) returned 1 [0211.995] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.vhd" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.vhd")) returned 1 [0211.996] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0211.996] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0211.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0211.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0211.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0212.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0212.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.003] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0212.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0212.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1148, lpOverlapped=0x0) returned 1 [0212.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeeb8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1150, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1150, lpOverlapped=0x0) returned 1 [0212.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.035] CloseHandle (hObject=0x1f0) returned 1 [0212.038] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.038] SetEndOfFile (hFile=0x1e0) returned 1 [0212.039] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), lpNewFileName="C:\\588bce7c90097ed212\\Setup.exe.vhd" (normalized: "c:\\588bce7c90097ed212\\setup.exe.vhd")) returned 1 [0212.039] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0212.040] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0212.049] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0212.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756de8 [0212.049] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756de8 | out: hHeap=0x2750000) returned 1 [0212.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.050] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0212.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0212.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.063] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.063] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.064] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.079] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.079] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.079] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.079] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.080] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.085] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.131] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1158, lpOverlapped=0x0) returned 1 [0212.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1160, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1160, lpOverlapped=0x0) returned 1 [0212.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.135] CloseHandle (hObject=0x1f0) returned 1 [0212.155] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.155] SetEndOfFile (hFile=0x1e0) returned 1 [0212.182] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), lpNewFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.vhd")) returned 1 [0212.183] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0212.183] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0212.197] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0212.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0212.197] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.197] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0212.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.198] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0212.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0212.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.201] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.245] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.245] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x150, lpOverlapped=0x0) returned 1 [0212.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffeb0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x150, lpOverlapped=0x0) returned 1 [0212.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.246] CloseHandle (hObject=0x1f0) returned 1 [0212.253] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.253] SetEndOfFile (hFile=0x1e0) returned 1 [0212.253] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.vhd")) returned 1 [0212.254] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0212.254] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0212.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0212.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756de8 [0212.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756de8 | out: hHeap=0x2750000) returned 1 [0212.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.284] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0212.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0212.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15a8, lpOverlapped=0x0) returned 1 [0212.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15b0, lpOverlapped=0x0) returned 1 [0212.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.293] CloseHandle (hObject=0x1f0) returned 1 [0212.321] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.321] SetEndOfFile (hFile=0x1e0) returned 1 [0212.333] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.vhd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.vhd")) returned 1 [0212.334] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0212.334] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.342] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.342] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.342] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0212.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0212.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.343] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0212.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1758, lpOverlapped=0x0) returned 1 [0212.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1760, lpOverlapped=0x0) returned 1 [0212.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.386] CloseHandle (hObject=0x1f0) returned 1 [0212.410] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.410] SetEndOfFile (hFile=0x1e0) returned 1 [0212.416] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.vhd" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.vhd")) returned 1 [0212.416] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0212.416] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0212.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d98 [0212.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d98 | out: hHeap=0x2750000) returned 1 [0212.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.428] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0212.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0212.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x78, lpOverlapped=0x0) returned 1 [0212.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff88, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x80, lpOverlapped=0x0) returned 1 [0212.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.437] CloseHandle (hObject=0x1f0) returned 1 [0212.440] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.440] SetEndOfFile (hFile=0x1e0) returned 1 [0212.440] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.vhd" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.vhd")) returned 1 [0212.441] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0212.441] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0212.450] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0212.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0212.450] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.450] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.450] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0212.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.450] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.451] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0212.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0212.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1420, lpOverlapped=0x0) returned 1 [0212.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffebe0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1420, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1420, lpOverlapped=0x0) returned 1 [0212.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.474] CloseHandle (hObject=0x1f0) returned 1 [0212.480] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.480] SetEndOfFile (hFile=0x1e0) returned 1 [0212.480] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), lpNewFileName="C:\\588bce7c90097ed212\\sqmapi.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.vhd")) returned 1 [0212.481] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0212.481] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.492] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.493] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.493] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0212.493] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0212.493] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.493] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0212.493] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.493] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.493] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0212.493] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.493] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.493] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0212.494] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.494] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0212.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.498] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1704, lpOverlapped=0x0) returned 1 [0212.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8fc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1710, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1710, lpOverlapped=0x0) returned 1 [0212.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.529] CloseHandle (hObject=0x1f0) returned 1 [0212.544] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.544] SetEndOfFile (hFile=0x1e0) returned 1 [0212.545] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Strings.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\strings.xml.vhd")) returned 1 [0212.545] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0212.545] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.554] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0212.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x17f2, lpOverlapped=0x0) returned 1 [0212.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe80e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1800, lpOverlapped=0x0) returned 1 [0212.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.559] CloseHandle (hObject=0x1f0) returned 1 [0212.586] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.586] SetEndOfFile (hFile=0x1e0) returned 1 [0212.594] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\UiInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.vhd")) returned 1 [0212.599] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0212.599] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0212.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0212.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0212.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0212.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.612] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0212.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0212.613] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1688, lpOverlapped=0x0) returned 1 [0212.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe978, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1690, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1690, lpOverlapped=0x0) returned 1 [0212.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0212.765] CloseHandle (hObject=0x1f0) returned 1 [0212.867] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.867] SetEndOfFile (hFile=0x1e0) returned 1 [0212.922] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\watermark.bmp.vhd" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.vhd")) returned 1 [0212.923] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0212.923] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0212.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.924] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0212.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0212.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0212.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0212.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0212.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0212.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0212.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.952] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0212.952] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.953] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.953] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0212.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0212.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0212.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0212.953] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0212.953] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0212.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.954] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0212.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0212.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0212.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0212.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0212.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0212.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0212.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.013] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.015] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.015] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.046] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.047] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.047] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.047] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.048] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.049] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.049] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.050] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.063] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.131] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.437] CloseHandle (hObject=0x1f0) returned 1 [0213.686] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.686] SetEndOfFile (hFile=0x1e0) returned 1 [0213.694] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.vhd")) returned 1 [0213.695] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0213.695] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0213.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0213.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0213.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0213.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0213.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0213.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0213.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0213.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0213.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0213.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0213.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0213.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0213.704] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0213.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0213.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0213.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0213.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0213.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0213.706] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0213.707] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0213.707] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0213.707] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0213.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0213.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.783] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.783] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0213.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0213.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0213.941] CloseHandle (hObject=0x1f0) returned 1 [0214.072] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.072] SetEndOfFile (hFile=0x1e0) returned 1 [0214.088] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.vhd")) returned 1 [0214.089] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0214.089] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0214.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0214.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0214.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0214.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0214.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0214.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0214.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0214.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0214.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0214.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0214.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.107] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0214.107] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0214.107] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0214.107] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0214.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0214.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0214.108] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.109] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0214.109] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.109] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0214.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.270] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.285] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.285] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.285] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.286] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.286] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.303] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.304] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.304] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.309] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.310] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.310] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.311] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.311] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.311] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.311] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.344] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.544] CloseHandle (hObject=0x1f0) returned 1 [0214.754] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.755] SetEndOfFile (hFile=0x1e0) returned 1 [0214.764] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.vhd")) returned 1 [0214.765] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0214.765] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0214.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0214.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.773] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0214.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0214.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0214.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0214.781] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0214.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0214.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d98 [0214.781] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0214.781] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.781] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d98 | out: hHeap=0x2750000) returned 1 [0214.782] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0214.782] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.782] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0214.782] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757d90 [0214.782] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0214.782] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0214.782] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0214.782] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0214.784] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2757d90 [0214.784] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757d90 | out: hHeap=0x2750000) returned 1 [0214.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0214.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0214.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.924] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0214.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0214.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0214.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.003] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.003] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.013] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.015] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.015] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.063] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.064] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.131] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.240] CloseHandle (hObject=0x1f0) returned 1 [0215.333] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.333] SetEndOfFile (hFile=0x1e0) returned 1 [0215.341] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.vhd" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.vhd")) returned 1 [0215.341] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0215.342] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0215.342] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba248 [0215.412] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.412] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0215.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d98 [0215.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x28) returned 0x2757d90 [0215.412] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0215.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756de8 [0215.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0x2757dc0 [0215.412] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0215.412] FindClose (in: hFindFile=0xbba248 | out: hFindFile=0xbba248) returned 1 [0215.413] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0215.494] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.494] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0215.495] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0215.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0215.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0215.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0215.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0215.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0215.814] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0215.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0215.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0215.814] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0215.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0215.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0215.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0215.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0215.815] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0215.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0215.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0215.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0215.816] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0215.816] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0215.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0215.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0215.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0215.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0215.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.852] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0215.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0215.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12c8, lpOverlapped=0x0) returned 1 [0215.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0215.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12d0, lpOverlapped=0x0) returned 1 [0215.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0215.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0215.925] CloseHandle (hObject=0x1f0) returned 1 [0215.975] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0215.975] SetEndOfFile (hFile=0x1e0) returned 1 [0216.004] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.vhd" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.vhd")) returned 1 [0216.006] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0216.006] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0216.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0216.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0216.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0216.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0216.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0216.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0216.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0216.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0216.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0216.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0216.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0216.705] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0216.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0216.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0216.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0216.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0216.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0216.707] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0216.707] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0216.707] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0216.707] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0216.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x9c, lpOverlapped=0x0) returned 1 [0216.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xa0, lpOverlapped=0x0) returned 1 [0216.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0216.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0216.710] CloseHandle (hObject=0x1f0) returned 1 [0216.716] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0216.716] SetEndOfFile (hFile=0x1e0) returned 1 [0216.717] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.vhd" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.vhd")) returned 1 [0216.718] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0216.718] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0216.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0216.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0216.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0216.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.010] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0217.010] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0217.010] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0217.010] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0217.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0217.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0217.011] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.011] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0217.011] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0217.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.012] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.012] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0217.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0217.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0217.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0217.012] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.012] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0217.014] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0217.014] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.014] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.014] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0217.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x241, lpOverlapped=0x0) returned 1 [0217.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffdbf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x250, lpOverlapped=0x0) returned 1 [0217.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0217.016] CloseHandle (hObject=0x1f0) returned 1 [0217.017] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.017] SetEndOfFile (hFile=0x1e0) returned 1 [0217.018] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.vhd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.vhd")) returned 1 [0217.018] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0217.019] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0217.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0217.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0217.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0217.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0217.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0217.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0217.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0217.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0217.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.036] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0217.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0217.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0217.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0217.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0217.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0217.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0217.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4a, lpOverlapped=0x0) returned 1 [0217.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffb6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x50, lpOverlapped=0x0) returned 1 [0217.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0217.041] CloseHandle (hObject=0x1f0) returned 1 [0217.044] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.044] SetEndOfFile (hFile=0x1e0) returned 1 [0217.044] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.vhd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.vhd")) returned 1 [0217.045] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0217.045] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0217.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0217.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0217.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0217.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0217.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0217.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0217.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0217.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0217.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.080] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0217.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0217.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0217.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0217.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0217.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0217.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0217.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x133, lpOverlapped=0x0) returned 1 [0217.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffecd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x140, lpOverlapped=0x0) returned 1 [0217.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0217.084] CloseHandle (hObject=0x1f0) returned 1 [0217.088] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.088] SetEndOfFile (hFile=0x1e0) returned 1 [0217.088] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.vhd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.vhd")) returned 1 [0217.089] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0217.089] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0217.194] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba288 [0217.846] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.846] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0217.846] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0217.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0217.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0217.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0217.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0217.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0217.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0217.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0217.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0217.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.917] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0217.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0217.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0217.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0217.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0217.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0217.918] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.919] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0217.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0217.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0217.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0217.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0217.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0217.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0217.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0217.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0217.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0217.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0217.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6b2, lpOverlapped=0x0) returned 1 [0217.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff94e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6c0, lpOverlapped=0x0) returned 1 [0217.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0217.967] CloseHandle (hObject=0x1f0) returned 1 [0217.973] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.973] SetEndOfFile (hFile=0x1e0) returned 1 [0217.974] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.vhd" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.vhd")) returned 1 [0217.975] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0217.975] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0217.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0217.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0217.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0217.990] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0217.990] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0217.990] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0217.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0217.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0217.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0217.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0217.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0217.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.991] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0217.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0217.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0217.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0217.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0217.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0217.993] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0217.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0217.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0217.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0217.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1774, lpOverlapped=0x0) returned 1 [0218.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe88c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1780, lpOverlapped=0x0) returned 1 [0218.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.061] CloseHandle (hObject=0x1f0) returned 1 [0218.065] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.065] SetEndOfFile (hFile=0x1e0) returned 1 [0218.065] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.vhd" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.vhd")) returned 1 [0218.066] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0218.066] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.067] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.068] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.069] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.076] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0218.076] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0218.076] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0218.076] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0218.076] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0218.076] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0218.076] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.077] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0218.077] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0218.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.077] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.077] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0218.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0218.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0218.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0218.078] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.078] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0218.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0218.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0218.079] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.079] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x28, lpOverlapped=0x0) returned 1 [0218.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x30, lpOverlapped=0x0) returned 1 [0218.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.082] CloseHandle (hObject=0x1f0) returned 1 [0218.083] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.083] SetEndOfFile (hFile=0x1e0) returned 1 [0218.084] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.vhd" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.vhd")) returned 1 [0218.085] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0218.085] FindClose (in: hFindFile=0xbba288 | out: hFindFile=0xbba288) returned 1 [0218.085] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0218.088] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.088] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0218.088] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0218.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0218.119] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0218.119] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0218.119] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0218.119] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0218.119] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.119] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0218.120] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0218.120] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.120] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.120] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0218.120] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0218.120] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0218.121] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0218.121] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.121] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0218.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0218.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0218.122] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x47e, lpOverlapped=0x0) returned 1 [0218.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x480, lpOverlapped=0x0) returned 1 [0218.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.124] CloseHandle (hObject=0x1f0) returned 1 [0218.128] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.128] SetEndOfFile (hFile=0x1e0) returned 1 [0218.292] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.vhd")) returned 1 [0218.293] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0218.293] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.305] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0218.305] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0218.305] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0218.305] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0218.305] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0218.305] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0218.306] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.306] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0218.306] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0218.306] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.306] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.306] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0218.306] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0218.306] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0218.306] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0218.316] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.316] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0218.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0218.317] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.317] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0218.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0218.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0218.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.318] CloseHandle (hObject=0x1f0) returned 1 [0218.320] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.320] SetEndOfFile (hFile=0x1e0) returned 1 [0218.320] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.vhd")) returned 1 [0218.321] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0218.322] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.469] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0218.470] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0218.470] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0218.470] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0218.470] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0218.470] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0218.470] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.470] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0218.471] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0218.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.471] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.471] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0218.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0218.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0218.471] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0218.472] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.472] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0218.473] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0218.473] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.474] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0218.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0218.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0218.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.689] CloseHandle (hObject=0x1f0) returned 1 [0218.691] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.691] SetEndOfFile (hFile=0x1e0) returned 1 [0218.757] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.vhd")) returned 1 [0218.758] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0218.758] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0218.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0218.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0218.769] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0218.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0218.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0218.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0218.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0218.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.770] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0218.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0218.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0218.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0218.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0218.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0218.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0218.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0218.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0218.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.774] CloseHandle (hObject=0x1f0) returned 1 [0218.776] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.776] SetEndOfFile (hFile=0x1e0) returned 1 [0218.776] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.vhd")) returned 1 [0218.777] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0218.777] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0218.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0218.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0218.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0218.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0218.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0218.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0218.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0218.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.854] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0218.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0218.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0218.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0218.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0218.856] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0218.856] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0218.856] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0218.856] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0218.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0218.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0218.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0218.858] CloseHandle (hObject=0x1f0) returned 1 [0218.859] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0218.860] SetEndOfFile (hFile=0x1e0) returned 1 [0218.960] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.vhd")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0218.962] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0218.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0218.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0218.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0218.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0219.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0219.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0219.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0219.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.041] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0219.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0219.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0219.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0219.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.044] CloseHandle (hObject=0x1f0) returned 1 [0219.045] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.046] SetEndOfFile (hFile=0x1e0) returned 1 [0219.160] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.vhd")) returned 1 [0219.161] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0219.161] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.173] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0219.174] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0219.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0219.174] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.174] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.174] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0219.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.174] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.175] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.175] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.175] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.175] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0219.176] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.176] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0219.177] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.177] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.177] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.177] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0219.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0219.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.179] CloseHandle (hObject=0x1f0) returned 1 [0219.182] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.182] SetEndOfFile (hFile=0x1e0) returned 1 [0219.182] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.vhd")) returned 1 [0219.183] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0219.183] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0219.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0219.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0219.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0219.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.261] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0219.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0219.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0219.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0219.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.265] CloseHandle (hObject=0x1f0) returned 1 [0219.268] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.268] SetEndOfFile (hFile=0x1e0) returned 1 [0219.405] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.vhd")) returned 1 [0219.406] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0219.406] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.419] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.419] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.420] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0219.420] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0219.420] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.420] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0219.420] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.420] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0219.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.421] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0219.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0219.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x37e, lpOverlapped=0x0) returned 1 [0219.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0219.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.473] CloseHandle (hObject=0x1f0) returned 1 [0219.476] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.476] SetEndOfFile (hFile=0x1e0) returned 1 [0219.541] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.vhd")) returned 1 [0219.542] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0219.542] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.622] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0219.622] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0219.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0219.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0219.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.624] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0219.624] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.624] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0219.625] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.626] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.626] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.626] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x47e, lpOverlapped=0x0) returned 1 [0219.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x480, lpOverlapped=0x0) returned 1 [0219.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.628] CloseHandle (hObject=0x1f0) returned 1 [0219.653] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.654] SetEndOfFile (hFile=0x1e0) returned 1 [0219.654] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.vhd")) returned 1 [0219.655] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0219.655] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.666] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0219.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0219.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0219.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0219.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.667] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0219.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.668] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0219.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.669] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.669] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.670] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0219.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0219.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0219.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0219.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0219.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0219.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0219.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0219.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xf66, lpOverlapped=0x0) returned 1 [0219.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff09a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xf70, lpOverlapped=0x0) returned 1 [0219.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.736] CloseHandle (hObject=0x1f0) returned 1 [0219.738] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.738] SetEndOfFile (hFile=0x1e0) returned 1 [0219.739] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.vhd")) returned 1 [0219.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0219.740] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0219.748] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0219.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0219.748] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.748] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.748] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0219.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.748] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.749] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0219.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0219.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0219.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0219.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x796, lpOverlapped=0x0) returned 1 [0219.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff86a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x7a0, lpOverlapped=0x0) returned 1 [0219.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.753] CloseHandle (hObject=0x1f0) returned 1 [0219.756] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.756] SetEndOfFile (hFile=0x1e0) returned 1 [0219.756] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.vhd")) returned 1 [0219.757] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0219.757] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0219.852] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0219.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0219.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0219.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.853] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0219.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0219.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x47e, lpOverlapped=0x0) returned 1 [0219.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x480, lpOverlapped=0x0) returned 1 [0219.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.856] CloseHandle (hObject=0x1f0) returned 1 [0219.867] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.867] SetEndOfFile (hFile=0x1e0) returned 1 [0219.977] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.vhd")) returned 1 [0219.978] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0219.978] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0219.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0219.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0219.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0219.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0219.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0219.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0219.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0219.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0219.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0219.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.992] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0219.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0219.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0219.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0219.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0219.994] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0219.994] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0219.994] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0219.995] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0219.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x47e, lpOverlapped=0x0) returned 1 [0219.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0219.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x480, lpOverlapped=0x0) returned 1 [0219.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0219.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0219.996] CloseHandle (hObject=0x1f0) returned 1 [0219.998] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0219.998] SetEndOfFile (hFile=0x1e0) returned 1 [0219.998] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.vhd")) returned 1 [0220.000] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0220.000] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.081] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0220.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0220.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0220.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0220.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.083] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.084] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0220.084] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.084] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0220.085] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.085] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.085] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.085] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.085] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x796, lpOverlapped=0x0) returned 1 [0220.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff86a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x7a0, lpOverlapped=0x0) returned 1 [0220.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.089] CloseHandle (hObject=0x1f0) returned 1 [0220.178] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.178] SetEndOfFile (hFile=0x1e0) returned 1 [0220.273] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.vhd" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.vhd")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0220.274] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0220.274] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0220.275] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.275] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0220.275] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0220.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0220.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0220.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0220.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.294] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0220.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0220.296] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.296] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.302] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.303] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.304] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.306] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.306] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.307] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.307] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.307] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.309] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc82, lpOverlapped=0x0) returned 1 [0220.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff37e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc90, lpOverlapped=0x0) returned 1 [0220.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.310] CloseHandle (hObject=0x1f0) returned 1 [0220.354] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.354] SetEndOfFile (hFile=0x1e0) returned 1 [0220.446] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.vhd")) returned 1 [0220.447] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0220.447] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0220.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0220.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0220.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0220.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.456] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0220.457] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.457] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0220.458] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x188a, lpOverlapped=0x0) returned 1 [0220.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe776, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1890, lpOverlapped=0x0) returned 1 [0220.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.465] CloseHandle (hObject=0x1f0) returned 1 [0220.478] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.478] SetEndOfFile (hFile=0x1e0) returned 1 [0220.479] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.vhd")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0220.485] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0220.485] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0220.485] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.485] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0220.486] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0220.686] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0220.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0220.687] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.687] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.687] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0220.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.687] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.687] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0220.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0220.689] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.689] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.689] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1444, lpOverlapped=0x0) returned 1 [0220.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffebbc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1450, lpOverlapped=0x0) returned 1 [0220.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.715] CloseHandle (hObject=0x1f0) returned 1 [0220.720] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.720] SetEndOfFile (hFile=0x1e0) returned 1 [0220.721] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.vhd")) returned 1 [0220.722] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0220.722] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0220.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0220.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.770] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0220.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0220.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1882, lpOverlapped=0x0) returned 1 [0220.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe77e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1890, lpOverlapped=0x0) returned 1 [0220.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.778] CloseHandle (hObject=0x1f0) returned 1 [0220.780] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.780] SetEndOfFile (hFile=0x1e0) returned 1 [0220.780] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.vhd")) returned 1 [0220.781] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0220.781] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0220.782] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0220.783] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.783] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0220.783] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0220.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0220.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0220.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0220.793] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.793] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.793] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.793] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.793] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0220.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0220.795] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.795] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.795] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbfd, lpOverlapped=0x0) returned 1 [0220.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff403, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc00, lpOverlapped=0x0) returned 1 [0220.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.797] CloseHandle (hObject=0x1f0) returned 1 [0220.800] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.800] SetEndOfFile (hFile=0x1e0) returned 1 [0220.801] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.vhd")) returned 1 [0220.837] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0220.837] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0220.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0220.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0220.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0220.847] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.847] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.847] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.847] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.847] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0220.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0220.849] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.849] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x187c, lpOverlapped=0x0) returned 1 [0220.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe784, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1880, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1880, lpOverlapped=0x0) returned 1 [0220.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.859] CloseHandle (hObject=0x1f0) returned 1 [0220.865] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.865] SetEndOfFile (hFile=0x1e0) returned 1 [0220.865] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.vhd")) returned 1 [0220.866] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0220.866] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0220.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0220.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0220.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0220.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0220.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0220.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0220.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0220.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0220.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0220.876] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.876] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.877] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0220.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0220.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0220.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0220.877] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.877] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0220.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0220.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0220.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0220.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0220.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0220.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0220.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x958, lpOverlapped=0x0) returned 1 [0220.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0220.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x960, lpOverlapped=0x0) returned 1 [0220.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0220.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0220.935] CloseHandle (hObject=0x1f0) returned 1 [0220.940] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0220.940] SetEndOfFile (hFile=0x1e0) returned 1 [0220.941] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.vhd")) returned 1 [0220.942] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0220.942] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0220.942] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0221.071] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.071] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0221.071] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.078] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.079] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.080] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0221.081] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0221.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0221.081] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.081] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.081] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0221.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.081] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.082] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0221.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.082] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0221.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.083] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.084] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18a5, lpOverlapped=0x0) returned 1 [0221.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe75b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18b0, lpOverlapped=0x0) returned 1 [0221.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.086] CloseHandle (hObject=0x1f0) returned 1 [0221.087] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.087] SetEndOfFile (hFile=0x1e0) returned 1 [0221.087] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.vhd")) returned 1 [0221.090] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0221.090] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0221.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0221.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0221.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0221.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.099] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0221.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0221.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.104] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd90, lpOverlapped=0x0) returned 1 [0221.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd90, lpOverlapped=0x0) returned 1 [0221.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.156] CloseHandle (hObject=0x1f0) returned 1 [0221.160] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.160] SetEndOfFile (hFile=0x1e0) returned 1 [0221.263] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.vhd")) returned 1 [0221.263] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0221.264] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.272] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0221.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0221.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.273] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0221.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0221.275] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.275] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.275] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.275] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1758, lpOverlapped=0x0) returned 1 [0221.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.282] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1760, lpOverlapped=0x0) returned 1 [0221.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.283] CloseHandle (hObject=0x1f0) returned 1 [0221.284] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.284] SetEndOfFile (hFile=0x1e0) returned 1 [0221.285] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.vhd")) returned 1 [0221.286] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0221.286] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0221.286] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba188 [0221.287] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.287] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0221.287] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.296] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0221.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0221.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0221.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0221.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.298] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0221.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0221.299] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.299] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.299] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.299] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfaf, lpOverlapped=0x0) returned 1 [0221.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff051, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xfb0, lpOverlapped=0x0) returned 1 [0221.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.301] CloseHandle (hObject=0x1f0) returned 1 [0221.356] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.356] SetEndOfFile (hFile=0x1e0) returned 1 [0221.443] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.vhd")) returned 1 [0221.445] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0221.445] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0221.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0221.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0221.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0221.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.456] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0221.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.456] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0221.457] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.457] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.458] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x197e, lpOverlapped=0x0) returned 1 [0221.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe682, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1980, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1980, lpOverlapped=0x0) returned 1 [0221.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.467] CloseHandle (hObject=0x1f0) returned 1 [0221.473] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.473] SetEndOfFile (hFile=0x1e0) returned 1 [0221.473] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.vhd")) returned 1 [0221.474] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0221.474] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0221.529] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0221.530] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.530] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0221.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0221.530] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.530] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.530] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.530] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.530] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0221.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0221.531] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.531] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.532] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.532] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x958, lpOverlapped=0x0) returned 1 [0221.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x960, lpOverlapped=0x0) returned 1 [0221.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.536] CloseHandle (hObject=0x1f0) returned 1 [0221.544] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.544] SetEndOfFile (hFile=0x1e0) returned 1 [0221.545] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.vhd")) returned 1 [0221.546] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0221.546] FindClose (in: hFindFile=0xbba188 | out: hFindFile=0xbba188) returned 1 [0221.546] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0221.547] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.547] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0221.547] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0221.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0221.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.557] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0221.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0221.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.559] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x16c3, lpOverlapped=0x0) returned 1 [0221.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe93d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x16d0, lpOverlapped=0x0) returned 1 [0221.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.619] CloseHandle (hObject=0x1f0) returned 1 [0221.624] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.624] SetEndOfFile (hFile=0x1e0) returned 1 [0221.803] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.vhd")) returned 1 [0221.806] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0221.806] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0221.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0221.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0221.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0221.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.818] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0221.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0221.820] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.820] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.820] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.820] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.820] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.820] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd0c, lpOverlapped=0x0) returned 1 [0221.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff2f4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd10, lpOverlapped=0x0) returned 1 [0221.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.829] CloseHandle (hObject=0x1f0) returned 1 [0221.832] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.832] SetEndOfFile (hFile=0x1e0) returned 1 [0221.832] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.vhd")) returned 1 [0221.833] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0221.885] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0221.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0221.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0221.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0221.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0221.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0221.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0221.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0221.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.899] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0221.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0221.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0221.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0221.900] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.900] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0221.901] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0221.901] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0221.901] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0221.901] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0221.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0221.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0221.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1758, lpOverlapped=0x0) returned 1 [0221.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1760, lpOverlapped=0x0) returned 1 [0221.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0221.908] CloseHandle (hObject=0x1f0) returned 1 [0221.916] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0221.917] SetEndOfFile (hFile=0x1e0) returned 1 [0221.917] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.vhd")) returned 1 [0221.918] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0221.918] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0221.918] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0221.918] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.918] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0221.918] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0221.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0221.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0221.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.925] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.926] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.927] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0221.927] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0222.017] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0222.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0222.017] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.017] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0222.018] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.018] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.018] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.018] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.018] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0222.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0222.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xf13, lpOverlapped=0x0) returned 1 [0222.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff0ed, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xf20, lpOverlapped=0x0) returned 1 [0222.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0222.022] CloseHandle (hObject=0x1f0) returned 1 [0222.036] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.036] SetEndOfFile (hFile=0x1e0) returned 1 [0222.152] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.vhd")) returned 1 [0222.155] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0222.156] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0222.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0222.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0222.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0222.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0222.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.173] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.173] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.173] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.173] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0222.173] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.173] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0222.174] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.175] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.175] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.175] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.228] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.228] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc12, lpOverlapped=0x0) returned 1 [0222.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff3ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc20, lpOverlapped=0x0) returned 1 [0222.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0222.233] CloseHandle (hObject=0x1f0) returned 1 [0222.249] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.249] SetEndOfFile (hFile=0x1e0) returned 1 [0222.249] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.vhd")) returned 1 [0222.250] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0222.250] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0222.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0222.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0222.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0222.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0222.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.261] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0222.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0222.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.263] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.263] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x558, lpOverlapped=0x0) returned 1 [0222.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffaa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x560, lpOverlapped=0x0) returned 1 [0222.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0222.315] CloseHandle (hObject=0x1f0) returned 1 [0222.325] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.325] SetEndOfFile (hFile=0x1e0) returned 1 [0222.326] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.vhd")) returned 1 [0222.327] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0222.327] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0222.327] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0222.327] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.327] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0222.327] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0222.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0222.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d48 [0222.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d48 | out: hHeap=0x2750000) returned 1 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.336] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0222.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0222.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xf19, lpOverlapped=0x0) returned 1 [0222.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff0e7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xf20, lpOverlapped=0x0) returned 1 [0222.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0222.339] CloseHandle (hObject=0x1f0) returned 1 [0222.464] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.464] SetEndOfFile (hFile=0x1e0) returned 1 [0222.563] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.vhd")) returned 1 [0222.580] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0222.580] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0222.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.609] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.609] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.609] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0222.609] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0222.609] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.609] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0222.609] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.609] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.609] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0222.609] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.609] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.610] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.610] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.610] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.610] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0222.610] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.610] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0222.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.624] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xf70, lpOverlapped=0x0) returned 1 [0222.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff090, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xf70, lpOverlapped=0x0) returned 1 [0222.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0222.633] CloseHandle (hObject=0x1f0) returned 1 [0222.682] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.682] SetEndOfFile (hFile=0x1e0) returned 1 [0222.823] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.vhd")) returned 1 [0222.824] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0222.824] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0222.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.848] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.848] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.848] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0222.848] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0222.849] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.849] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0222.849] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0222.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.850] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0222.851] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.851] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0222.852] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.852] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.852] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.852] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x558, lpOverlapped=0x0) returned 1 [0222.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffaa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x560, lpOverlapped=0x0) returned 1 [0222.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0222.872] CloseHandle (hObject=0x1f0) returned 1 [0222.876] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.876] SetEndOfFile (hFile=0x1e0) returned 1 [0222.877] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.vhd")) returned 1 [0222.878] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0222.878] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0222.878] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0222.879] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.879] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0222.880] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0222.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0222.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0222.930] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0222.930] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0222.930] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0222.931] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0222.931] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0222.931] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0222.931] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.931] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0222.931] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0222.931] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.931] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.931] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0222.932] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0222.932] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0222.932] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0222.932] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.932] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0222.933] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0222.933] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0222.933] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0222.933] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0222.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0222.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0222.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x14b8, lpOverlapped=0x0) returned 1 [0222.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb48, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0222.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x14c0, lpOverlapped=0x0) returned 1 [0222.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0222.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.053] CloseHandle (hObject=0x1f0) returned 1 [0223.066] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.066] SetEndOfFile (hFile=0x1e0) returned 1 [0223.066] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.vhd")) returned 1 [0223.069] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0223.069] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.096] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.096] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.097] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0223.097] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0223.097] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.097] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0223.097] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.097] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.097] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0223.097] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.097] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.098] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.098] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0223.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.098] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0223.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1e4a, lpOverlapped=0x0) returned 1 [0223.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe1b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1e50, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1e50, lpOverlapped=0x0) returned 1 [0223.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.186] CloseHandle (hObject=0x1f0) returned 1 [0223.192] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.193] SetEndOfFile (hFile=0x1e0) returned 1 [0223.193] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.vhd")) returned 1 [0223.194] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0223.194] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0223.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0223.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0223.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0223.272] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.272] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.272] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.272] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.272] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0223.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0223.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.274] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0223.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0223.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.293] CloseHandle (hObject=0x1f0) returned 1 [0223.296] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.296] SetEndOfFile (hFile=0x1e0) returned 1 [0223.296] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.vhd")) returned 1 [0223.297] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0223.297] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0223.298] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0223.298] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.298] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0223.298] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0223.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0223.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0223.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0223.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.311] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0223.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0223.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.312] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe63, lpOverlapped=0x0) returned 1 [0223.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff19d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe70, lpOverlapped=0x0) returned 1 [0223.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.313] CloseHandle (hObject=0x1f0) returned 1 [0223.316] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.316] SetEndOfFile (hFile=0x1e0) returned 1 [0223.316] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.vhd")) returned 1 [0223.330] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0223.330] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0223.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0223.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0223.341] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.341] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.341] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0223.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.341] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.341] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.341] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0223.341] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.342] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0223.342] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.342] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.342] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.344] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1b62, lpOverlapped=0x0) returned 1 [0223.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe49e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1b70, lpOverlapped=0x0) returned 1 [0223.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.352] CloseHandle (hObject=0x1f0) returned 1 [0223.356] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.356] SetEndOfFile (hFile=0x1e0) returned 1 [0223.356] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.vhd")) returned 1 [0223.357] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0223.357] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0223.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0223.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0223.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0223.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.370] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0223.371] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.371] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0223.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.373] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.396] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0223.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0223.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0223.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.398] CloseHandle (hObject=0x1f0) returned 1 [0223.400] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.400] SetEndOfFile (hFile=0x1e0) returned 1 [0223.400] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.vhd")) returned 1 [0223.401] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0223.401] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0223.401] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0223.402] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.402] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0223.402] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0223.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0223.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0223.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0223.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.413] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0223.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0223.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.414] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.415] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.415] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfc8, lpOverlapped=0x0) returned 1 [0223.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff038, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xfd0, lpOverlapped=0x0) returned 1 [0223.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0223.416] CloseHandle (hObject=0x1f0) returned 1 [0223.475] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.475] SetEndOfFile (hFile=0x1e0) returned 1 [0223.568] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.vhd")) returned 1 [0223.574] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0223.575] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0223.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0223.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0223.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0223.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0223.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0223.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0223.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0223.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0223.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0223.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0223.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.598] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0223.599] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0223.599] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0223.599] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0223.599] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.599] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0223.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0223.601] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0223.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0223.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0223.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0223.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0223.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0223.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1c6, lpOverlapped=0x0) returned 1 [0224.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe3a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d0, lpOverlapped=0x0) returned 1 [0224.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0224.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0224.295] CloseHandle (hObject=0x1f0) returned 1 [0224.297] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.297] SetEndOfFile (hFile=0x1e0) returned 1 [0224.427] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.vhd")) returned 1 [0224.428] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0224.428] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0224.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0224.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0224.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0224.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0224.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0224.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0224.478] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.478] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0224.478] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0224.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0224.478] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.478] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0224.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0224.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0224.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0224.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0224.480] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0224.480] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0224.480] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.480] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0224.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0224.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0224.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0224.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0224.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0224.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0224.579] CloseHandle (hObject=0x1f0) returned 1 [0224.595] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.596] SetEndOfFile (hFile=0x1e0) returned 1 [0224.596] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.vhd")) returned 1 [0224.611] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0224.611] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0224.612] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0224.613] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.613] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0224.613] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0224.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0224.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0224.872] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0224.872] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0224.872] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0224.872] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0224.872] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0224.872] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0224.872] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.872] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0224.872] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0224.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0224.873] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.873] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0224.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0224.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0224.873] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0224.873] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.873] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0224.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0224.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0224.875] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0224.875] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0224.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbe6, lpOverlapped=0x0) returned 1 [0224.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff41a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xbf0, lpOverlapped=0x0) returned 1 [0224.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0224.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0224.877] CloseHandle (hObject=0x1f0) returned 1 [0224.892] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0224.892] SetEndOfFile (hFile=0x1e0) returned 1 [0224.892] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.vhd")) returned 1 [0224.915] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0224.915] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0224.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0224.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0225.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0225.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0225.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0225.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0225.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0225.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0225.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0225.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0225.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0225.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.496] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0225.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0225.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0225.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0225.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0225.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0225.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0225.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0225.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0225.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.943] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0225.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15c0, lpOverlapped=0x0) returned 1 [0225.943] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.943] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15c0, lpOverlapped=0x0) returned 1 [0225.943] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.944] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0225.944] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0225.944] CloseHandle (hObject=0x1f0) returned 1 [0225.967] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.968] SetEndOfFile (hFile=0x1e0) returned 1 [0225.968] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.vhd")) returned 1 [0225.969] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0225.969] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0225.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0225.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.989] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0225.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0225.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0225.991] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0225.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0225.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0225.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0225.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0225.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0225.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0225.992] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.992] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0225.992] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0225.993] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0225.993] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0225.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.993] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0225.994] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0225.994] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0225.995] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0225.995] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0225.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0225.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.282] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.283] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x558, lpOverlapped=0x0) returned 1 [0226.283] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffaa8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x560, lpOverlapped=0x0) returned 1 [0226.284] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0226.284] CloseHandle (hObject=0x1f0) returned 1 [0226.286] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.286] SetEndOfFile (hFile=0x1e0) returned 1 [0226.286] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.vhd")) returned 1 [0226.287] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0226.287] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0226.288] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0226.289] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.289] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0226.289] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0226.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0226.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0226.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.334] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0226.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0226.335] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0226.335] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0226.335] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.335] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0226.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0226.336] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0226.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdda, lpOverlapped=0x0) returned 1 [0226.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff226, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xde0, lpOverlapped=0x0) returned 1 [0226.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0226.338] CloseHandle (hObject=0x1f0) returned 1 [0226.339] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.340] SetEndOfFile (hFile=0x1e0) returned 1 [0226.340] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.vhd")) returned 1 [0226.343] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0226.343] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.439] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0226.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0226.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0226.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0226.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0226.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0226.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0226.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0226.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.441] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.441] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0226.441] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0226.441] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0226.441] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0226.441] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.441] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0226.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0226.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0226.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1712, lpOverlapped=0x0) returned 1 [0226.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8ee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1720, lpOverlapped=0x0) returned 1 [0226.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0226.535] CloseHandle (hObject=0x1f0) returned 1 [0226.540] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.540] SetEndOfFile (hFile=0x1e0) returned 1 [0226.541] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.vhd")) returned 1 [0226.542] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0226.542] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0226.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0226.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0226.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0226.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0226.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0226.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0226.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0226.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.556] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0226.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0226.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0226.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0226.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0226.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0226.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0226.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xb58, lpOverlapped=0x0) returned 1 [0226.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff4a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb60, lpOverlapped=0x0) returned 1 [0226.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0226.579] CloseHandle (hObject=0x1f0) returned 1 [0226.584] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.584] SetEndOfFile (hFile=0x1e0) returned 1 [0226.687] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.vhd")) returned 1 [0226.689] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0226.689] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0226.689] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0226.690] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.690] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0226.710] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0226.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0226.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0226.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.757] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0226.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0226.758] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0226.758] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0226.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0226.759] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0226.759] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.759] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.759] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0226.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x118f, lpOverlapped=0x0) returned 1 [0226.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee71, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1190, lpOverlapped=0x0) returned 1 [0226.829] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0226.830] CloseHandle (hObject=0x1f0) returned 1 [0226.832] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.832] SetEndOfFile (hFile=0x1e0) returned 1 [0226.833] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.vhd")) returned 1 [0226.836] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0226.836] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.897] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0226.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0226.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0226.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0226.897] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0226.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0226.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0226.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0226.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0226.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.898] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0226.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0226.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0226.898] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0226.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0226.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0226.900] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0226.900] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0226.900] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0226.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0226.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0226.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ed6, lpOverlapped=0x0) returned 1 [0226.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe12a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0226.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ee0, lpOverlapped=0x0) returned 1 [0226.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0226.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0226.908] CloseHandle (hObject=0x1f0) returned 1 [0226.985] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0226.985] SetEndOfFile (hFile=0x1e0) returned 1 [0227.098] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.vhd")) returned 1 [0227.099] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0227.099] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.102] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.103] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.104] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0227.105] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0227.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0227.105] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0227.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.106] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.106] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0227.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0227.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.107] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.107] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1b58, lpOverlapped=0x0) returned 1 [0227.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe4a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1b60, lpOverlapped=0x0) returned 1 [0227.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.111] CloseHandle (hObject=0x1f0) returned 1 [0227.116] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.116] SetEndOfFile (hFile=0x1e0) returned 1 [0227.116] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.vhd")) returned 1 [0227.117] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0227.117] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0227.118] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0227.118] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.118] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0227.118] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757228 [0227.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757228 | out: hHeap=0x2750000) returned 1 [0227.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0227.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0227.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.131] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0227.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0227.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.133] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x78d, lpOverlapped=0x0) returned 1 [0227.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff873, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x790, lpOverlapped=0x0) returned 1 [0227.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.192] CloseHandle (hObject=0x1f0) returned 1 [0227.196] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.196] SetEndOfFile (hFile=0x1e0) returned 1 [0227.321] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.vhd")) returned 1 [0227.325] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0227.325] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0227.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0227.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0227.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0227.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.338] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0227.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0227.339] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.339] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.339] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.339] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.344] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa82, lpOverlapped=0x0) returned 1 [0227.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff57e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xa90, lpOverlapped=0x0) returned 1 [0227.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.348] CloseHandle (hObject=0x1f0) returned 1 [0227.352] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.352] SetEndOfFile (hFile=0x1e0) returned 1 [0227.352] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.vhd")) returned 1 [0227.353] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0227.353] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.410] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.411] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.411] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0227.411] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0227.411] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.411] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0227.411] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.411] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.411] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0227.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.412] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0227.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0227.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.414] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1d58, lpOverlapped=0x0) returned 1 [0227.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe2a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d60, lpOverlapped=0x0) returned 1 [0227.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.417] CloseHandle (hObject=0x1f0) returned 1 [0227.420] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.420] SetEndOfFile (hFile=0x1e0) returned 1 [0227.420] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.vhd")) returned 1 [0227.422] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0227.422] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0227.422] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0227.422] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.422] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0227.423] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0227.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0227.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0227.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0227.434] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.434] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.435] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.435] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.435] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0227.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0227.436] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.436] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.436] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.436] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe3b, lpOverlapped=0x0) returned 1 [0227.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1c5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe40, lpOverlapped=0x0) returned 1 [0227.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.485] CloseHandle (hObject=0x1f0) returned 1 [0227.488] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.488] SetEndOfFile (hFile=0x1e0) returned 1 [0227.550] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.vhd")) returned 1 [0227.553] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0227.553] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.569] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0227.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0227.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756db8 [0227.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.571] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756db8 | out: hHeap=0x2750000) returned 1 [0227.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.571] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.571] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0227.572] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.572] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0227.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18bc, lpOverlapped=0x0) returned 1 [0227.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe744, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18c0, lpOverlapped=0x0) returned 1 [0227.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.583] CloseHandle (hObject=0x1f0) returned 1 [0227.588] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.588] SetEndOfFile (hFile=0x1e0) returned 1 [0227.589] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.vhd")) returned 1 [0227.589] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0227.589] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0227.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0227.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0227.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0227.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.656] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0227.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0227.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0227.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0227.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0227.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0227.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.662] CloseHandle (hObject=0x1f0) returned 1 [0227.664] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.664] SetEndOfFile (hFile=0x1e0) returned 1 [0227.665] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.vhd")) returned 1 [0227.666] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0227.666] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0227.666] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0227.667] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.667] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0227.667] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0227.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0227.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0227.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0227.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0227.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0227.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0227.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0227.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0227.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.678] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.678] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0227.678] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0227.678] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0227.678] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0227.678] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.678] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0227.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0227.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0227.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0227.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0227.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x109e, lpOverlapped=0x0) returned 1 [0227.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef62, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0227.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10a0, lpOverlapped=0x0) returned 1 [0227.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0227.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0227.820] CloseHandle (hObject=0x1f0) returned 1 [0227.836] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0227.836] SetEndOfFile (hFile=0x1e0) returned 1 [0228.005] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.vhd")) returned 1 [0228.008] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0228.008] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0228.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0228.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0228.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0228.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.039] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0228.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0228.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x11aa, lpOverlapped=0x0) returned 1 [0228.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x11b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x11b0, lpOverlapped=0x0) returned 1 [0228.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.111] CloseHandle (hObject=0x1f0) returned 1 [0228.114] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.114] SetEndOfFile (hFile=0x1e0) returned 1 [0228.115] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.vhd")) returned 1 [0228.116] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0228.116] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0228.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0228.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0228.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0228.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.131] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.132] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.132] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0228.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.132] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0228.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.133] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.133] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x958, lpOverlapped=0x0) returned 1 [0228.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x960, lpOverlapped=0x0) returned 1 [0228.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.193] CloseHandle (hObject=0x1f0) returned 1 [0228.196] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.196] SetEndOfFile (hFile=0x1e0) returned 1 [0228.197] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.vhd")) returned 1 [0228.198] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0228.198] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0228.198] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0228.198] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.199] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0228.199] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0228.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0228.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0228.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0228.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.211] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0228.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0228.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.213] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ac3, lpOverlapped=0x0) returned 1 [0228.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe53d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ad0, lpOverlapped=0x0) returned 1 [0228.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.215] CloseHandle (hObject=0x1f0) returned 1 [0228.219] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.219] SetEndOfFile (hFile=0x1e0) returned 1 [0228.219] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.vhd")) returned 1 [0228.223] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0228.223] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0228.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0228.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0228.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0228.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.285] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0228.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0228.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.287] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.287] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x198c, lpOverlapped=0x0) returned 1 [0228.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe674, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1990, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1990, lpOverlapped=0x0) returned 1 [0228.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.295] CloseHandle (hObject=0x1f0) returned 1 [0228.300] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.300] SetEndOfFile (hFile=0x1e0) returned 1 [0228.301] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.vhd")) returned 1 [0228.302] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0228.302] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0228.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0228.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0228.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0228.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.369] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0228.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0228.371] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x158, lpOverlapped=0x0) returned 1 [0228.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x160, lpOverlapped=0x0) returned 1 [0228.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.378] CloseHandle (hObject=0x1f0) returned 1 [0228.380] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.380] SetEndOfFile (hFile=0x1e0) returned 1 [0228.381] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.vhd")) returned 1 [0228.382] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0228.382] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0228.382] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0228.383] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.383] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0228.384] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0228.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0228.401] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.401] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0228.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.402] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0228.402] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.402] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.402] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.402] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.402] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.403] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0228.403] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.403] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0228.404] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.404] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.404] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.405] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdc6, lpOverlapped=0x0) returned 1 [0228.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff23a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xdd0, lpOverlapped=0x0) returned 1 [0228.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.445] CloseHandle (hObject=0x1f0) returned 1 [0228.448] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.448] SetEndOfFile (hFile=0x1e0) returned 1 [0228.531] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.vhd")) returned 1 [0228.533] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0228.534] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0228.545] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0228.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0228.545] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.545] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.546] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0228.546] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.550] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0228.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0228.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.552] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x412, lpOverlapped=0x0) returned 1 [0228.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffbee, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x420, lpOverlapped=0x0) returned 1 [0228.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.583] CloseHandle (hObject=0x1f0) returned 1 [0228.588] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.588] SetEndOfFile (hFile=0x1e0) returned 1 [0228.589] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.vhd")) returned 1 [0228.590] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0228.590] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.687] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.688] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.688] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0228.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0228.688] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.688] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0228.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.689] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0228.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.689] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.689] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0228.690] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.690] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0228.691] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.691] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.691] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.691] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0228.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0228.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x958, lpOverlapped=0x0) returned 1 [0228.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x960, lpOverlapped=0x0) returned 1 [0228.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.697] CloseHandle (hObject=0x1f0) returned 1 [0228.700] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.700] SetEndOfFile (hFile=0x1e0) returned 1 [0228.701] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.vhd")) returned 1 [0228.702] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0228.702] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0228.703] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0228.704] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.704] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0228.704] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0228.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0228.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0228.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0228.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0228.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0228.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0228.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0228.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0228.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.789] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0228.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0228.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0228.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0228.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0228.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0228.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0228.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0228.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0228.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe76, lpOverlapped=0x0) returned 1 [0228.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff18a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0228.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe80, lpOverlapped=0x0) returned 1 [0228.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0228.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0228.792] CloseHandle (hObject=0x1f0) returned 1 [0228.797] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0228.797] SetEndOfFile (hFile=0x1e0) returned 1 [0229.032] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.vhd")) returned 1 [0229.035] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0229.035] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0229.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0229.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0229.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0229.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.051] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0229.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0229.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcde, lpOverlapped=0x0) returned 1 [0229.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff322, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xce0, lpOverlapped=0x0) returned 1 [0229.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.120] CloseHandle (hObject=0x1f0) returned 1 [0229.126] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.126] SetEndOfFile (hFile=0x1e0) returned 1 [0229.127] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.vhd")) returned 1 [0229.128] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0229.128] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.140] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.141] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0229.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0229.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.142] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0229.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0229.143] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.143] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.143] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.143] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.143] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0229.144] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.144] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0229.145] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.145] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.145] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0229.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0229.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.200] CloseHandle (hObject=0x1f0) returned 1 [0229.208] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.209] SetEndOfFile (hFile=0x1e0) returned 1 [0229.209] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.vhd")) returned 1 [0229.210] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0229.210] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0229.210] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba388 [0229.210] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.211] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0229.211] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0229.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0229.223] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.223] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0229.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0229.223] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.223] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.223] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.224] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.224] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0229.224] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.224] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0229.225] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.225] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.225] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.225] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc74, lpOverlapped=0x0) returned 1 [0229.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff38c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc80, lpOverlapped=0x0) returned 1 [0229.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.226] CloseHandle (hObject=0x1f0) returned 1 [0229.228] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.228] SetEndOfFile (hFile=0x1e0) returned 1 [0229.229] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.vhd")) returned 1 [0229.231] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0229.232] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0229.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0229.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0229.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0229.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.284] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0229.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0229.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdb0, lpOverlapped=0x0) returned 1 [0229.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff250, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xdb0, lpOverlapped=0x0) returned 1 [0229.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.297] CloseHandle (hObject=0x1f0) returned 1 [0229.300] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.300] SetEndOfFile (hFile=0x1e0) returned 1 [0229.301] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.vhd")) returned 1 [0229.302] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0229.302] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.302] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0229.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0229.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756db8 [0229.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756db8 | out: hHeap=0x2750000) returned 1 [0229.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.370] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0229.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0229.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.372] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x358, lpOverlapped=0x0) returned 1 [0229.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffca8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x360, lpOverlapped=0x0) returned 1 [0229.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.377] CloseHandle (hObject=0x1f0) returned 1 [0229.438] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.438] SetEndOfFile (hFile=0x1e0) returned 1 [0229.531] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.vhd")) returned 1 [0229.532] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0229.533] FindClose (in: hFindFile=0xbba388 | out: hFindFile=0xbba388) returned 1 [0229.533] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0229.533] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.533] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0229.534] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0229.547] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0229.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0229.547] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0229.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.548] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0229.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0229.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2ac, lpOverlapped=0x0) returned 1 [0229.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2b0, lpOverlapped=0x0) returned 1 [0229.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.553] CloseHandle (hObject=0x1f0) returned 1 [0229.555] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.555] SetEndOfFile (hFile=0x1e0) returned 1 [0229.555] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.vhd")) returned 1 [0229.558] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0229.558] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.572] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.572] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0229.572] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0229.572] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.572] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0229.572] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.572] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.572] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0229.572] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.573] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0229.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0229.575] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.575] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.575] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x110c, lpOverlapped=0x0) returned 1 [0229.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeef4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1110, lpOverlapped=0x0) returned 1 [0229.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.652] CloseHandle (hObject=0x1f0) returned 1 [0229.658] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.658] SetEndOfFile (hFile=0x1e0) returned 1 [0229.658] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.vhd")) returned 1 [0229.660] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0229.660] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0229.672] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0229.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0229.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0229.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.674] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0229.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0229.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.783] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xb58, lpOverlapped=0x0) returned 1 [0229.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff4a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb60, lpOverlapped=0x0) returned 1 [0229.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.785] CloseHandle (hObject=0x1f0) returned 1 [0229.787] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.787] SetEndOfFile (hFile=0x1e0) returned 1 [0229.788] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.vhd")) returned 1 [0229.789] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0229.789] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0229.789] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba288 [0229.790] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.790] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0229.790] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0229.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0229.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0229.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0229.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.801] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0229.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0229.802] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd5b, lpOverlapped=0x0) returned 1 [0229.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff2a5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd60, lpOverlapped=0x0) returned 1 [0229.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0229.804] CloseHandle (hObject=0x1f0) returned 1 [0229.809] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.810] SetEndOfFile (hFile=0x1e0) returned 1 [0229.810] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.vhd")) returned 1 [0229.814] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0229.814] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0229.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0229.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0229.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0229.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0229.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0229.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0229.944] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0229.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0229.944] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0229.945] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.945] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0229.945] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0229.945] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0229.945] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0229.945] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.946] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0229.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0229.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0229.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0229.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0229.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0229.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.988] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0229.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0229.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0229.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1aa, lpOverlapped=0x0) returned 1 [0230.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1b0, lpOverlapped=0x0) returned 1 [0230.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.017] CloseHandle (hObject=0x1f0) returned 1 [0230.028] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.028] SetEndOfFile (hFile=0x1e0) returned 1 [0230.029] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.vhd")) returned 1 [0230.030] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0230.030] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0230.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0230.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0230.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0230.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.044] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.044] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.044] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.044] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0230.044] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.044] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0230.046] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.143] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.143] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x958, lpOverlapped=0x0) returned 1 [0230.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x960, lpOverlapped=0x0) returned 1 [0230.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.177] CloseHandle (hObject=0x1f0) returned 1 [0230.180] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.180] SetEndOfFile (hFile=0x1e0) returned 1 [0230.181] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.vhd")) returned 1 [0230.182] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0230.182] FindClose (in: hFindFile=0xbba288 | out: hFindFile=0xbba288) returned 1 [0230.182] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0230.182] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.182] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0230.183] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0230.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0230.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0230.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0230.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.210] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0230.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0230.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcf2, lpOverlapped=0x0) returned 1 [0230.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff30e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd00, lpOverlapped=0x0) returned 1 [0230.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.213] CloseHandle (hObject=0x1f0) returned 1 [0230.271] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.272] SetEndOfFile (hFile=0x1e0) returned 1 [0230.338] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.vhd")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0230.425] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.439] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.439] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.439] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0230.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0230.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0230.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0230.440] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.441] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.441] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.441] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.441] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0230.441] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.441] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0230.442] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.442] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.442] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.442] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfb4, lpOverlapped=0x0) returned 1 [0230.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff04c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xfc0, lpOverlapped=0x0) returned 1 [0230.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.548] CloseHandle (hObject=0x1f0) returned 1 [0230.553] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.553] SetEndOfFile (hFile=0x1e0) returned 1 [0230.554] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.vhd")) returned 1 [0230.555] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0230.555] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.569] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.569] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.569] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0230.569] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0230.569] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.569] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cf8 [0230.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cf8 | out: hHeap=0x2750000) returned 1 [0230.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.570] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.570] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.571] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0230.571] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.571] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0230.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0230.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0230.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.595] CloseHandle (hObject=0x1f0) returned 1 [0230.597] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.597] SetEndOfFile (hFile=0x1e0) returned 1 [0230.598] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.vhd")) returned 1 [0230.599] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0230.599] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0230.599] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0230.600] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.600] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0230.600] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.613] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.613] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0230.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0230.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0230.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0230.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.615] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0230.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0230.618] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.618] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.618] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.618] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe8e, lpOverlapped=0x0) returned 1 [0230.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff172, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe90, lpOverlapped=0x0) returned 1 [0230.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.620] CloseHandle (hObject=0x1f0) returned 1 [0230.679] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.679] SetEndOfFile (hFile=0x1e0) returned 1 [0230.708] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.vhd")) returned 1 [0230.711] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0230.711] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0230.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27574e8 | out: hHeap=0x2750000) returned 1 [0230.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0230.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0230.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.729] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0230.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0230.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1c4a, lpOverlapped=0x0) returned 1 [0230.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe3b6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1c50, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1c50, lpOverlapped=0x0) returned 1 [0230.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.742] CloseHandle (hObject=0x1f0) returned 1 [0230.791] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.791] SetEndOfFile (hFile=0x1e0) returned 1 [0230.799] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.vhd")) returned 1 [0230.800] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0230.800] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0230.814] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0230.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756cd8 [0230.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756cd8 | out: hHeap=0x2750000) returned 1 [0230.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.815] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.816] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.816] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.816] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0230.816] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.816] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0230.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.819] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.820] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.820] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x758, lpOverlapped=0x0) returned 1 [0230.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x760, lpOverlapped=0x0) returned 1 [0230.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.822] CloseHandle (hObject=0x1f0) returned 1 [0230.831] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.831] SetEndOfFile (hFile=0x1e0) returned 1 [0230.832] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.vhd")) returned 1 [0230.833] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0230.833] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0230.833] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0230.833] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.833] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0230.833] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0230.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0230.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0230.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0230.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.845] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0230.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0230.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.847] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18a5, lpOverlapped=0x0) returned 1 [0230.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe75b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18b0, lpOverlapped=0x0) returned 1 [0230.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.849] CloseHandle (hObject=0x1f0) returned 1 [0230.860] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.860] SetEndOfFile (hFile=0x1e0) returned 1 [0230.860] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.vhd")) returned 1 [0230.863] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0230.863] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27570c8 [0230.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27570c8 | out: hHeap=0x2750000) returned 1 [0230.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d28 [0230.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d28 | out: hHeap=0x2750000) returned 1 [0230.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.916] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0230.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0230.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd90, lpOverlapped=0x0) returned 1 [0230.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff270, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd90, lpOverlapped=0x0) returned 1 [0230.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.936] CloseHandle (hObject=0x1f0) returned 1 [0230.942] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.942] SetEndOfFile (hFile=0x1e0) returned 1 [0230.942] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.vhd")) returned 1 [0230.944] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0230.944] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.944] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.944] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0230.963] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0230.963] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0230.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0230.964] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0230.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0230.964] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756df8 [0230.964] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.964] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0230.964] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756df8 | out: hHeap=0x2750000) returned 1 [0230.965] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.988] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0230.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0230.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0230.989] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0230.989] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.989] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0230.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0230.990] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0230.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0230.991] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0230.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0230.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0230.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1758, lpOverlapped=0x0) returned 1 [0230.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8a8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0230.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1760, lpOverlapped=0x0) returned 1 [0230.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0230.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0230.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0230.995] CloseHandle (hObject=0x1f0) returned 1 [0231.000] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.000] SetEndOfFile (hFile=0x1e0) returned 1 [0231.001] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.vhd")) returned 1 [0231.002] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0231.002] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0231.003] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0231.004] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.004] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0231.004] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0231.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0231.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0231.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0231.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0231.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0231.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0231.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0231.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0231.021] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0231.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0231.022] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.022] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0231.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0231.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0231.023] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0231.023] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.023] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0231.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0231.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0231.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0231.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1d8f, lpOverlapped=0x0) returned 1 [0231.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe271, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d90, lpOverlapped=0x0) returned 1 [0231.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0231.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0231.029] CloseHandle (hObject=0x1f0) returned 1 [0231.032] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.032] SetEndOfFile (hFile=0x1e0) returned 1 [0231.034] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.vhd" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.vhd")) returned 1 [0231.036] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0231.037] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0231.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0231.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.042] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.043] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0231.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0231.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0231.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757070 | out: hHeap=0x2750000) returned 1 [0231.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0231.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756da8 [0231.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0231.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756da8 | out: hHeap=0x2750000) returned 1 [0231.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0231.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.052] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0231.052] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0231.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0231.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0231.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0231.054] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0231.054] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0231.054] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.054] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0231.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.064] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1e6, lpOverlapped=0x0) returned 1 [0231.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe1a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f0, lpOverlapped=0x0) returned 1 [0231.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0231.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0231.067] CloseHandle (hObject=0x1f0) returned 1 [0231.081] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.081] SetEndOfFile (hFile=0x1e0) returned 1 [0231.084] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.vhd" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.vhd")) returned 1 [0231.085] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0231.085] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0231.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0231.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.092] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.093] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.094] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0231.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0x27596e0 [0231.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0x2759858 [0231.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0231.101] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0231.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x27599c0 [0231.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0x2756d78 [0231.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27599c0 | out: hHeap=0x2750000) returned 1 [0231.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2756d78 | out: hHeap=0x2750000) returned 1 [0231.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0231.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.103] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0231.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0x2757df8 [0231.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0x2759858 [0231.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0231.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0231.105] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757df8 | out: hHeap=0x2750000) returned 1 [0231.105] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0x2759858 [0231.105] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2759858 | out: hHeap=0x2750000) returned 1 [0231.106] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27596e0 | out: hHeap=0x2750000) returned 1 [0231.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0231.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0231.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x358, lpOverlapped=0x0) returned 1 [0231.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffca8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0231.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x360, lpOverlapped=0x0) returned 1 [0231.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0231.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0231.146] CloseHandle (hObject=0x1f0) returned 1 [0231.152] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0231.156] SetEndOfFile (hFile=0x1e0) returned 1 [0231.156] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.vhd" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.vhd")) returned 1 [0231.158] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0231.158] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0231.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0231.159] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.159] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681b1f90, ftCreationTime.dwHighDateTime=0x1d58309, ftLastAccessTime.dwLowDateTime=0xa0fbef90, ftLastAccessTime.dwHighDateTime=0x1d5cbcc, ftLastWriteTime.dwLowDateTime=0xa0fbef90, ftLastWriteTime.dwHighDateTime=0x1d5cbcc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0231.159] CreateFileW (lpFileName="C:\\Program Files\\WindowsPowerShell\\accupos.exe" (normalized: "c:\\program files\\windowspowershell\\accupos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0231.159] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0231.160] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6a8ea0, ftCreationTime.dwHighDateTime=0x1d5b9fb, ftLastAccessTime.dwLowDateTime=0x5e546250, ftLastAccessTime.dwHighDateTime=0x1d5c3f5, ftLastWriteTime.dwLowDateTime=0x5e546250, ftLastWriteTime.dwHighDateTime=0x1d5c3f5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="conscious-information.exe", cAlternateFileName="CONSCI~1.EXE")) returned 1 [0231.160] CreateFileW (lpFileName="C:\\Program Files\\WindowsPowerShell\\conscious-information.exe" (normalized: "c:\\program files\\windowspowershell\\conscious-information.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0231.160] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5834850, ftCreationTime.dwHighDateTime=0x1d5e85b, ftLastAccessTime.dwLowDateTime=0x5c11d3c0, ftLastAccessTime.dwHighDateTime=0x1d5ec62, ftLastWriteTime.dwLowDateTime=0x5c11d3c0, ftLastWriteTime.dwHighDateTime=0x1d5ec62, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0231.160] CreateFileW (lpFileName="C:\\Program Files\\WindowsPowerShell\\edcsvr.exe" (normalized: "c:\\program files\\windowspowershell\\edcsvr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0231.160] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0231.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d28 [0231.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0x27564b8 [0231.161] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66b9e6d0, ftCreationTime.dwHighDateTime=0x1d5b46a, ftLastAccessTime.dwLowDateTime=0x35acfe80, ftLastAccessTime.dwHighDateTime=0x1d5a81f, ftLastWriteTime.dwLowDateTime=0x35acfe80, ftLastWriteTime.dwHighDateTime=0x1d5a81f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0231.161] CreateFileW (lpFileName="C:\\Program Files\\WindowsPowerShell\\smartftp.exe" (normalized: "c:\\program files\\windowspowershell\\smartftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0231.161] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66b9e6d0, ftCreationTime.dwHighDateTime=0x1d5b46a, ftLastAccessTime.dwLowDateTime=0x35acfe80, ftLastAccessTime.dwHighDateTime=0x1d5a81f, ftLastWriteTime.dwLowDateTime=0x35acfe80, ftLastWriteTime.dwHighDateTime=0x1d5a81f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 0 [0231.161] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0231.162] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0231.162] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.370] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm", cAlternateFileName="9E2F88~1.0_X")) returned 1 [0231.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d78 [0231.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x92) returned 0x2757df8 [0231.371] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deleted", cAlternateFileName="")) returned 1 [0231.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756cd8 [0231.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x2757228 [0231.371] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1 [0231.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756db8 [0231.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0x27596e0 [0231.372] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0231.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756cf8 [0231.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa2) returned 0x2759798 [0231.372] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1 [0231.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756d48 [0231.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0x2759848 [0231.372] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_X")) returned 1 [0231.372] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756df8 [0231.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0x2759900 [0231.373] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MIBC7F~1.0_N")) returned 1 [0231.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2756da8 [0231.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa6) returned 0x27599b8 [0231.373] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0B0E~1.0_N")) returned 1 [0231.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759e58 [0231.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb6) returned 0x2759e70 [0231.373] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIACEC~1.0_N")) returned 1 [0231.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d28 [0231.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x2759f30 [0231.374] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1 [0231.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759e28 [0231.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0x2759fe8 [0231.375] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1 [0231.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759df8 [0231.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa4) returned 0x275a090 [0231.375] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1 [0231.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d48 [0231.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9a) returned 0x275a140 [0231.375] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1 [0231.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759db8 [0231.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa8) returned 0x275a1e8 [0231.376] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1 [0231.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759dc8 [0231.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0x275a298 [0231.376] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.SCA")) returned 1 [0231.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759da8 [0231.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc6) returned 0x275a340 [0231.376] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1 [0231.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d58 [0231.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x275a410 [0231.376] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_X")) returned 1 [0231.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c98 [0231.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0x275a4c8 [0231.377] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIBA67~1.SCA")) returned 1 [0231.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ca8 [0231.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xca) returned 0x275a570 [0231.377] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICC3B~1.0_N")) returned 1 [0231.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d78 [0231.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0x275a648 [0231.377] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBB30~1.0_X")) returned 1 [0231.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759dd8 [0231.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa4) returned 0x275a700 [0231.452] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2247~1.0_N")) returned 1 [0231.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759cb8 [0231.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb8) returned 0x275a7b0 [0231.452] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIECF5~1.0_X")) returned 1 [0231.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d18 [0231.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0x275a870 [0231.453] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIEB19~1.SCA")) returned 1 [0231.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d08 [0231.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xda) returned 0x275a928 [0231.453] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE745~1.0_X")) returned 1 [0231.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d88 [0231.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb4) returned 0x275aa10 [0231.453] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0231.454] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759cc8 [0231.454] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275aad0 [0231.454] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MIAA8F~1.SCA")) returned 1 [0231.454] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d38 [0231.454] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc0) returned 0x275ab98 [0231.454] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_N")) returned 1 [0231.454] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759cd8 [0231.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa4) returned 0x275ac60 [0231.455] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI79E2~1.0_X")) returned 1 [0231.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759de8 [0231.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9a) returned 0x275ad10 [0231.455] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI5BB5~1.0_N")) returned 1 [0231.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759e38 [0231.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x275adb8 [0231.455] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID6EE~1.SCA")) returned 1 [0231.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d68 [0231.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc8) returned 0x275ae70 [0231.456] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE03D~1.0_X")) returned 1 [0231.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759e48 [0231.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa2) returned 0x275af40 [0231.456] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAA72~1.0_N")) returned 1 [0231.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ce8 [0231.456] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc0) returned 0x275aff0 [0231.457] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI825E~1.0_X")) returned 1 [0231.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759cf8 [0231.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb6) returned 0x275b0b8 [0231.457] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI476B~1.0_X")) returned 1 [0231.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759d98 [0231.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb8) returned 0x275b178 [0231.457] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC168~1.0_N")) returned 1 [0231.457] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759e08 [0231.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc2) returned 0x275b238 [0231.458] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06F6~1.SCA")) returned 1 [0231.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759e18 [0231.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xec) returned 0x275b308 [0231.458] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI9806~1.0_N")) returned 1 [0231.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b78 [0231.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd0) returned 0x275b400 [0231.458] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA86~1.0_X")) returned 1 [0233.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b68 [0233.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc6) returned 0x275b4d8 [0233.001] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIA5B6~1.SCA")) returned 1 [0233.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c48 [0233.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd8) returned 0x275b5a8 [0233.001] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIFFC1~1.0_N")) returned 1 [0233.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ad8 [0233.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbc) returned 0x275b688 [0233.002] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIAB25~1.0_X")) returned 1 [0233.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c18 [0233.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb2) returned 0x275b750 [0233.002] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34B5~1.0_N")) returned 1 [0233.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b08 [0233.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0x275b810 [0233.003] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI21E8~1.0_X")) returned 1 [0233.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759af8 [0233.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa2) returned 0x275b8c8 [0233.003] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI052E~1.0_X")) returned 1 [0233.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b18 [0233.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275b978 [0233.004] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI3AF7~1.0_X")) returned 1 [0233.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759bf8 [0233.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275ba40 [0233.004] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4ACC~1.0_X")) returned 1 [0233.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c38 [0233.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275bb08 [0233.004] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0106~1.0_X")) returned 1 [0233.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ab8 [0233.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275bbd0 [0233.005] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI04D1~1.0_X")) returned 1 [0233.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c88 [0233.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275bc98 [0233.005] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIF51B~1.0_X")) returned 1 [0233.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b58 [0233.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275bd60 [0233.006] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI67F0~1.0_X")) returned 1 [0233.006] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b88 [0233.006] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275be28 [0233.006] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI2C2E~1.0_X")) returned 1 [0233.006] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759bc8 [0233.006] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbe) returned 0x275bef0 [0233.006] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEBDA~1.0_X")) returned 1 [0233.006] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c78 [0233.007] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275bfb8 [0233.007] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA018~1.0_X")) returned 1 [0233.007] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b28 [0233.007] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c080 [0233.007] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7399~1.0_X")) returned 1 [0233.007] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b48 [0233.007] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c148 [0233.007] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI38C6~1.0_X")) returned 1 [0233.007] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759bd8 [0233.008] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c210 [0233.008] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7D40~1.0_X")) returned 1 [0233.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ae8 [0233.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c2d8 [0233.021] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA22A~1.0_X")) returned 1 [0233.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b38 [0233.021] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275ca08 [0233.022] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEC84~1.0_X")) returned 1 [0233.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c58 [0233.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c6e8 [0233.022] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI6E3E~1.0_X")) returned 1 [0233.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c28 [0233.022] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c878 [0233.023] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBE4A~1.0_X")) returned 1 [0233.023] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759b98 [0233.023] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c7b0 [0233.023] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI7387~1.0_X")) returned 1 [0233.023] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c08 [0233.023] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275c490 [0233.023] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI20CB~1.0_X")) returned 1 [0233.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759be8 [0233.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb2) returned 0x275d3a8 [0233.024] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAECB~1.0_N")) returned 1 [0233.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759c68 [0233.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc0) returned 0x275c620 [0233.024] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4126~1.0_X")) returned 1 [0233.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759a98 [0233.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0x275d468 [0233.025] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI01E4~1.0_N")) returned 1 [0233.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759aa8 [0233.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275cad0 [0233.025] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI4988~1.SCA")) returned 1 [0233.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ba8 [0233.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xca) returned 0x275d520 [0233.025] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2A4A~1.0_N")) returned 1 [0233.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759bb8 [0233.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0x275d5f8 [0233.026] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI5B43~1.0_X")) returned 1 [0233.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x2759ac8 [0233.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa4) returned 0x275d6b0 [0233.026] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI155A~1.SCA")) returned 1 [0233.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275db00 [0233.027] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc2) returned 0x275db68 [0233.027] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI698D~1.0_X")) returned 1 [0233.027] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275dad0 [0233.027] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9c) returned 0x275dc38 [0233.027] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI86E0~1.0_N")) returned 1 [0233.027] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275db20 [0233.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0x275dce0 [0233.028] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4486~1.0_X")) returned 1 [0233.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275db10 [0233.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc0) returned 0x275c940 [0233.028] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI9817~1.0_X")) returned 1 [0233.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da90 [0233.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc0) returned 0x275cf80 [0233.029] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", cAlternateFileName="MI66C7~1.SCA")) returned 1 [0233.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da60 [0233.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc2) returned 0x275dd98 [0233.035] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", cAlternateFileName="MI29A2~1.0_N")) returned 1 [0233.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da50 [0233.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa6) returned 0x275de68 [0233.035] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", cAlternateFileName="MIC69C~1.0_X")) returned 1 [0233.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275dab0 [0233.035] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9c) returned 0x275df18 [0233.035] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIC910~1.0_X")) returned 1 [0233.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d9e0 [0233.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa8) returned 0x275dfc0 [0233.036] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI3F66~1.0_N")) returned 1 [0233.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275db50 [0233.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb4) returned 0x275e070 [0233.036] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.1_X")) returned 1 [0233.036] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275db30 [0233.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x275e130 [0233.037] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.1_X")) returned 1 [0233.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275db40 [0233.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x275e1e8 [0233.037] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI72FF~1.0_X")) returned 1 [0233.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da10 [0233.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x275e2a0 [0233.037] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA7C9~1.0_X")) returned 1 [0233.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da00 [0233.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0x275e358 [0233.038] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB6B3~1.0_N")) returned 1 [0233.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d990 [0233.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa4) returned 0x275e410 [0233.038] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIF132~1.0_X")) returned 1 [0233.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da70 [0233.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9a) returned 0x275e4c0 [0233.039] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MI5B39~1.SCA")) returned 1 [0233.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d9a0 [0233.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd8) returned 0x275e568 [0233.039] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI10C6~1.SCA")) returned 1 [0233.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da20 [0233.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd4) returned 0x275e648 [0233.039] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe", cAlternateFileName="MI5D6F~1.SCA")) returned 1 [0233.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da80 [0233.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd4) returned 0x275e728 [0233.040] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI0911~1.0_X")) returned 1 [0233.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275daa0 [0233.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0x275e808 [0233.040] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC62C~1.0_N")) returned 1 [0233.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275dac0 [0233.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbc) returned 0x275d048 [0233.041] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIB044~1.SCA")) returned 1 [0233.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275dae0 [0233.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd2) returned 0x275e8c0 [0233.041] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI41D1~1.0_X")) returned 1 [0233.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d9b0 [0233.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0xc90858 [0233.093] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI6662~1.0_N")) returned 1 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d9c0 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb8) returned 0x275e9a0 [0233.144] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI4B57~1.SCA")) returned 1 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d9d0 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xda) returned 0x275ea60 [0233.144] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7930~1.0_X")) returned 1 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d9f0 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb4) returned 0x275eb48 [0233.144] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIE825~1.0_N")) returned 1 [0233.144] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da30 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc2) returned 0x275ec08 [0233.145] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe", cAlternateFileName="MIAB71~1.SCA")) returned 1 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275da40 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd2) returned 0x275ecd8 [0233.145] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MIA7A5~1.SCA")) returned 1 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275daf0 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd2) returned 0x275edb8 [0233.145] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIA450~1.0_N")) returned 1 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d8c0 [0233.145] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb6) returned 0x275ee98 [0233.145] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI9599~1.0_X")) returned 1 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d940 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0xc90d60 [0233.146] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIB685~1.0_X")) returned 1 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d8d0 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc8) returned 0xc91050 [0233.146] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIF624~1.0_N")) returned 1 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d880 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd6) returned 0xc91120 [0233.146] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI0ADF~1.SCA")) returned 1 [0233.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d8b0 [0233.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xde) returned 0xc91200 [0233.147] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0319~1.0_N")) returned 1 [0233.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d7d0 [0233.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc2) returned 0xc912e8 [0233.147] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI214C~1.0_X")) returned 1 [0233.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d900 [0233.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb8) returned 0xc913b8 [0233.147] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1C44~1.0_N")) returned 1 [0233.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d910 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb4) returned 0xc91478 [0233.148] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI97D5~1.SCA")) returned 1 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d8f0 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd0) returned 0xc91538 [0233.148] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE984~1.0_X")) returned 1 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d7a0 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0xc90ca8 [0233.148] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe", cAlternateFileName="MID9F7~1.0_X")) returned 1 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d950 [0233.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0xc90910 [0233.149] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI99D1~1.0_N")) returned 1 [0233.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d890 [0233.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb6) returned 0xc91610 [0233.153] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI22BC~1.0_X")) returned 1 [0233.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d8a0 [0233.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275cb98 [0233.153] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB231~1.0_N")) returned 1 [0233.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d8e0 [0233.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc8) returned 0xc916d0 [0233.154] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06B9~1.SCA")) returned 1 [0233.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d960 [0233.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd4) returned 0xc917a0 [0233.154] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI101B~1.0_X")) returned 1 [0233.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d920 [0233.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0xc909c8 [0233.154] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2427~1.0_N")) returned 1 [0233.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d7b0 [0233.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275d110 [0233.155] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1B9A~1.0_N")) returned 1 [0233.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d970 [0233.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xae) returned 0xc90298 [0233.155] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7B67~1.0_X")) returned 1 [0233.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d850 [0233.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0xc91880 [0233.155] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI5488~1.SCA")) returned 1 [0233.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d980 [0233.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd2) returned 0xc91928 [0233.156] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34BC~1.0_N")) returned 1 [0233.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d930 [0233.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb6) returned 0xc91a08 [0233.156] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7E75~1.0_X")) returned 1 [0233.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d820 [0233.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xac) returned 0xc907a0 [0233.156] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4965~1.0_X")) returned 1 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d790 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xba) returned 0x275d2a0 [0233.157] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI58AE~1.0_N")) returned 1 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d830 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc8) returned 0xc91ac8 [0233.157] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI0679~1.SCA")) returned 1 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d7c0 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xe2) returned 0xc91b98 [0233.157] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB74B~1.0_N")) returned 1 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d860 [0233.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xc6) returned 0xc91c88 [0233.158] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA0B~1.0_X")) returned 1 [0233.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d7e0 [0233.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xbc) returned 0x275cc60 [0233.158] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID586~1.SCA")) returned 1 [0233.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d7f0 [0233.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd8) returned 0xc91d58 [0233.158] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7C12~1.0_X")) returned 1 [0233.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d800 [0233.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0xc90350 [0233.158] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIDC33~1.0_N")) returned 1 [0233.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d810 [0233.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb8) returned 0xc91e38 [0233.160] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe", cAlternateFileName="MIA74D~1.SCA")) returned 1 [0233.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d840 [0233.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xd8) returned 0xc91ef8 [0233.160] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI691C~1.0_X")) returned 1 [0233.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0x275d870 [0233.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xaa) returned 0xc90f88 [0233.160] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI984C~1.0_N")) returned 1 [0233.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92268 [0233.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb8) returned 0xc923e0 [0233.161] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 1 [0233.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92238 [0233.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0x2755f78 [0233.161] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 0 [0233.161] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0233.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec2e5526, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec2e5526, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0233.162] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec2e5526, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec2e5526, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.162] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31407e0, ftCreationTime.dwHighDateTime=0x1d5a2ec, ftLastAccessTime.dwLowDateTime=0x52bdf3c0, ftLastAccessTime.dwHighDateTime=0x1d58a43, ftLastWriteTime.dwLowDateTime=0x52bdf3c0, ftLastWriteTime.dwHighDateTime=0x1d58a43, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0233.162] CreateFileW (lpFileName="C:\\Program Files\\Windows Security\\alftp.exe" (normalized: "c:\\program files\\windows security\\alftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.162] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1 [0233.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc922d8 [0233.163] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0x275ef58 [0233.163] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 0 [0233.163] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0233.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec5ba381, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5ba381, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0233.164] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec5ba381, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5ba381, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.164] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6de02e0, ftCreationTime.dwHighDateTime=0x1d56e82, ftLastAccessTime.dwLowDateTime=0x998b7750, ftLastAccessTime.dwHighDateTime=0x1d5eb9b, ftLastWriteTime.dwLowDateTime=0x998b7750, ftLastWriteTime.dwHighDateTime=0x1d5eb9b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0233.164] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices\\spgagentservice.exe" (normalized: "c:\\program files\\windows portable devices\\spgagentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.164] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0233.164] CreateFileW (lpFileName="C:\\Program Files\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.165] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0233.165] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0233.166] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0233.166] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.166] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0233.166] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc923c8 [0233.166] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x2755fd8 [0233.166] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0233.166] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.167] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x22c400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0233.167] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files\\windows photo viewer\\imagingengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.168] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x958ec6d0, ftCreationTime.dwHighDateTime=0x1d5e9f1, ftLastAccessTime.dwLowDateTime=0x55ea1c90, ftLastAccessTime.dwHighDateTime=0x1d5c67f, ftLastWriteTime.dwLowDateTime=0x55ea1c90, ftLastWriteTime.dwHighDateTime=0x1d5c67f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0233.169] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\leechftp.exe" (normalized: "c:\\program files\\windows photo viewer\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.169] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abd1547, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x206cbb35, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4abd1547, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1db800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0233.169] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.169] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0233.170] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.170] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0233.171] CreateFileW (lpFileName="C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.171] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0233.172] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0233.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4fb610, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4fb610, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0233.172] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4fb610, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4fb610, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.172] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0233.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc923a8 [0233.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27574e8 [0233.173] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf96750, ftCreationTime.dwHighDateTime=0x1d5b235, ftLastAccessTime.dwLowDateTime=0x81a3bcb0, ftLastAccessTime.dwHighDateTime=0x1d57bbb, ftLastWriteTime.dwLowDateTime=0x81a3bcb0, ftLastWriteTime.dwHighDateTime=0x1d57bbb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0233.173] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\afr38.exe" (normalized: "c:\\program files\\windows nt\\afr38.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.173] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d5dc00, ftCreationTime.dwHighDateTime=0x1d56f5d, ftLastAccessTime.dwLowDateTime=0x53184c40, ftLastAccessTime.dwHighDateTime=0x1d5d493, ftLastWriteTime.dwLowDateTime=0x53184c40, ftLastWriteTime.dwHighDateTime=0x1d5d493, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0233.173] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\aldelo.exe" (normalized: "c:\\program files\\windows nt\\aldelo.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.174] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0233.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92248 [0233.174] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc924a0 [0233.174] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0233.174] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0233.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4d549a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4d549a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0233.175] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4d549a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4d549a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.175] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e39c8a0, ftCreationTime.dwHighDateTime=0x1d5a22d, ftLastAccessTime.dwLowDateTime=0x727c2f10, ftLastAccessTime.dwHighDateTime=0x1d5bd42, ftLastWriteTime.dwLowDateTime=0x727c2f10, ftLastWriteTime.dwHighDateTime=0x1d5bd42, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0233.175] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\coreftp.exe" (normalized: "c:\\program files\\windows multimedia platform\\coreftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.176] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1b1d4f0, ftCreationTime.dwHighDateTime=0x1d5cd33, ftLastAccessTime.dwLowDateTime=0x4b4ebc30, ftLastAccessTime.dwHighDateTime=0x1d567f4, ftLastWriteTime.dwLowDateTime=0x4b4ebc30, ftLastWriteTime.dwHighDateTime=0x1d567f4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="OPERAM~1.EXE")) returned 1 [0233.176] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\operamail.exe" (normalized: "c:\\program files\\windows multimedia platform\\operamail.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.176] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0233.176] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\sqmapi.dll" (normalized: "c:\\program files\\windows multimedia platform\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.176] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33d05e0, ftCreationTime.dwHighDateTime=0x1d5db84, ftLastAccessTime.dwLowDateTime=0xcbe839f0, ftLastAccessTime.dwHighDateTime=0x1d5770a, ftLastWriteTime.dwLowDateTime=0xcbe839f0, ftLastWriteTime.dwHighDateTime=0x1d5770a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0233.177] CreateFileW (lpFileName="C:\\Program Files\\Windows Multimedia Platform\\winscp.exe" (normalized: "c:\\program files\\windows multimedia platform\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.177] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33d05e0, ftCreationTime.dwHighDateTime=0x1d5db84, ftLastAccessTime.dwLowDateTime=0xcbe839f0, ftLastAccessTime.dwHighDateTime=0x1d5770a, ftLastWriteTime.dwLowDateTime=0xcbe839f0, ftLastWriteTime.dwHighDateTime=0x1d5770a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0233.177] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0233.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe939d36c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe939d36c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0233.178] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe939d36c, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe939d36c, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.178] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0233.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92368 [0233.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x2756038 [0233.178] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45423cc0, ftCreationTime.dwHighDateTime=0x1d5b170, ftLastAccessTime.dwLowDateTime=0x833dc350, ftLastAccessTime.dwHighDateTime=0x1d5cd6d, ftLastWriteTime.dwLowDateTime=0x833dc350, ftLastWriteTime.dwHighDateTime=0x1d5cd6d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="finances.exe", cAlternateFileName="")) returned 1 [0233.179] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\finances.exe" (normalized: "c:\\program files\\windows media player\\finances.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.179] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0233.179] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92278 [0233.179] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x2756158 [0233.179] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0233.180] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92288 [0233.180] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0xc92508 [0233.180] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0233.180] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files\\windows media player\\mpvis.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.262] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0233.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92298 [0233.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6c) returned 0xc92580 [0233.262] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0233.263] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files\\windows media player\\setup_wm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.263] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0233.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92318 [0233.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0x27563f8 [0233.264] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0233.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92228 [0233.264] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0xc925f8 [0233.264] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0233.264] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.266] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b148c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0233.266] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.267] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2f0d0100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0233.268] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files\\windows media player\\wmplayer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.269] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2c1c100, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0233.269] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.271] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3f71b00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x11f600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0233.271] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpnetwk.exe" (normalized: "c:\\program files\\windows media player\\wmpnetwk.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.271] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xbefe7b00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0233.271] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpnscfg.exe" (normalized: "c:\\program files\\windows media player\\wmpnscfg.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.271] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x4b5c6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0233.271] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.272] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x45b35800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0233.272] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.273] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x5fed3600, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0233.273] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files\\windows media player\\wmprph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.273] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0233.274] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files\\windows media player\\wmpshare.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.274] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0233.274] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0233.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1a4a5d8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1a4a5d8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0233.275] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1a4a5d8, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1a4a5d8, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.275] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7937d50, ftCreationTime.dwHighDateTime=0x1d5b386, ftLastAccessTime.dwLowDateTime=0xd3bcd130, ftLastAccessTime.dwHighDateTime=0x1d5807a, ftLastWriteTime.dwLowDateTime=0xd3bcd130, ftLastWriteTime.dwHighDateTime=0x1d5807a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1 [0233.275] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\centralcreditcard.exe" (normalized: "c:\\program files\\windows mail\\centralcreditcard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.276] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0233.276] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92398 [0233.276] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0xc92670 [0233.276] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a38470, ftCreationTime.dwHighDateTime=0x1d57a05, ftLastAccessTime.dwLowDateTime=0xd31c9130, ftLastAccessTime.dwHighDateTime=0x1d5ac7a, ftLastWriteTime.dwLowDateTime=0xd31c9130, ftLastWriteTime.dwHighDateTime=0x1d5ac7a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="humanity-volumes-enables.exe", cAlternateFileName="HUMANI~1.EXE")) returned 1 [0233.276] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\humanity-volumes-enables.exe" (normalized: "c:\\program files\\windows mail\\humanity-volumes-enables.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.276] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0233.277] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\msoe.dll" (normalized: "c:\\program files\\windows mail\\msoe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.278] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0233.278] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files\\windows mail\\msoeres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.279] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0233.279] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files\\windows mail\\oeimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.279] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0233.280] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\wab.exe" (normalized: "c:\\program files\\windows mail\\wab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.280] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0233.280] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files\\windows mail\\wabimp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.281] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0233.281] CreateFileW (lpFileName="C:\\Program Files\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files\\windows mail\\wabmig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.282] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0233.282] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0233.282] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0233.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec331bb1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec331bb1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0233.282] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec331bb1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec331bb1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.283] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d5a2b0, ftCreationTime.dwHighDateTime=0x1d5e43b, ftLastAccessTime.dwLowDateTime=0xf5d25a60, ftLastAccessTime.dwHighDateTime=0x1d5d430, ftLastWriteTime.dwLowDateTime=0xf5d25a60, ftLastWriteTime.dwHighDateTime=0x1d5d430, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0233.283] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\3dftp.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\3dftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.283] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0233.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc922e8 [0233.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x86) returned 0xc926c0 [0233.283] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea6f060, ftCreationTime.dwHighDateTime=0x1d5ad2b, ftLastAccessTime.dwLowDateTime=0x81a1bb10, ftLastAccessTime.dwHighDateTime=0x1d5d406, ftLastWriteTime.dwLowDateTime=0x81a1bb10, ftLastWriteTime.dwHighDateTime=0x1d5d406, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0233.284] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\far.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\far.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.284] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1 [0233.284] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\mssense.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.285] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1 [0233.285] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\SenseCncProxy.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\sensecncproxy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.285] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1 [0233.285] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\SenseCncPS.dll" (normalized: "c:\\program files\\windows defender advanced threat protection\\sensecncps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.291] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1 [0233.291] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\SenseSampleUploader.exe" (normalized: "c:\\program files\\windows defender advanced threat protection\\sensesampleuploader.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.292] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1 [0233.292] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\WATPCSP.dll" (normalized: "c:\\program files\\windows defender advanced threat protection\\watpcsp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.293] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0 [0233.293] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0233.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba288 [0233.294] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.294] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AmMonitoringInstall.mof", cAlternateFileName="")) returned 1 [0233.294] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\AmMonitoringInstall.mof" (normalized: "c:\\program files\\windows defender\\ammonitoringinstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.296] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AMMonitoringProvider.dll", cAlternateFileName="")) returned 1 [0233.296] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\AMMonitoringProvider.dll" (normalized: "c:\\program files\\windows defender\\ammonitoringprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.296] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x520c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AmStatusInstall.mof", cAlternateFileName="")) returned 1 [0233.297] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\AmStatusInstall.mof" (normalized: "c:\\program files\\windows defender\\amstatusinstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.297] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClientWMIInstall.mof", cAlternateFileName="")) returned 1 [0233.297] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ClientWMIInstall.mof" (normalized: "c:\\program files\\windows defender\\clientwmiinstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.298] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ConfigSecurityPolicy.exe", cAlternateFileName="")) returned 1 [0233.298] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ConfigSecurityPolicy.exe" (normalized: "c:\\program files\\windows defender\\configsecuritypolicy.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.298] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DataLayer.dll", cAlternateFileName="")) returned 1 [0233.298] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\DataLayer.dll" (normalized: "c:\\program files\\windows defender\\datalayer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.299] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x171cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DbgHelp.dll", cAlternateFileName="")) returned 1 [0233.299] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\DbgHelp.dll" (normalized: "c:\\program files\\windows defender\\dbghelp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.300] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af3c42, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26af3c42, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26af3c42, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DefenderCSP.dll", cAlternateFileName="")) returned 1 [0233.300] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\DefenderCSP.dll" (normalized: "c:\\program files\\windows defender\\defendercsp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.387] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Defendericon.png", cAlternateFileName="")) returned 1 [0233.388] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\Defendericon.png" (normalized: "c:\\program files\\windows defender\\defendericon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.389] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0233.390] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92328 [0233.390] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757070 [0233.390] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0233.390] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\EppManifest.dll" (normalized: "c:\\program files\\windows defender\\eppmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.391] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FepUnregister.mof", cAlternateFileName="")) returned 1 [0233.391] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\FepUnregister.mof" (normalized: "c:\\program files\\windows defender\\fepunregister.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.392] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f9baad, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0233.392] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.393] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAzSubmit.dll", cAlternateFileName="")) returned 1 [0233.393] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpAzSubmit.dll" (normalized: "c:\\program files\\windows defender\\mpazsubmit.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.393] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ca0b8b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xe9da0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0233.393] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.394] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f2939c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6af10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0233.394] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.394] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x874d15c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x53fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0233.394] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpCommu.dll" (normalized: "c:\\program files\\windows defender\\mpcommu.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.395] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1dba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0233.395] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpEvMsg.dll" (normalized: "c:\\program files\\windows defender\\mpevmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.396] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x880bd29, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0233.396] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files\\windows defender\\mpoav.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.397] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cda0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpProvider.dll", cAlternateFileName="")) returned 1 [0233.397] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpProvider.dll" (normalized: "c:\\program files\\windows defender\\mpprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.397] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6507363, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xac7a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpRtp.dll", cAlternateFileName="")) returned 1 [0233.397] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpRtp.dll" (normalized: "c:\\program files\\windows defender\\mprtp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.398] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x842bfe5, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x2099a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0233.398] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpSvc.dll" (normalized: "c:\\program files\\windows defender\\mpsvc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.399] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x53a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpuxhostproxy.dll", cAlternateFileName="")) returned 1 [0233.399] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\mpuxhostproxy.dll" (normalized: "c:\\program files\\windows defender\\mpuxhostproxy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.399] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpUXSrv.exe", cAlternateFileName="")) returned 1 [0233.399] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MpUXSrv.exe" (normalized: "c:\\program files\\windows defender\\mpuxsrv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.401] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x92ec92b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x137d98, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0233.401] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MSASCui.exe" (normalized: "c:\\program files\\windows defender\\msascui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.401] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x999a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSASCuiL.exe", cAlternateFileName="")) returned 1 [0233.401] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MSASCuiL.exe" (normalized: "c:\\program files\\windows defender\\msascuil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.402] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x147a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0233.402] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpCom.dll" (normalized: "c:\\program files\\windows defender\\msmpcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.403] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x849e6f2, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x191a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpEng.exe", cAlternateFileName="")) returned 1 [0233.403] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpEng.exe" (normalized: "c:\\program files\\windows defender\\msmpeng.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.404] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0233.404] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files\\windows defender\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.404] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x89d596d, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6c9a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0233.404] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpRes.dll" (normalized: "c:\\program files\\windows defender\\msmpres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.405] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpResL.dll", cAlternateFileName="")) returned 1 [0233.405] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\MsMpResL.dll" (normalized: "c:\\program files\\windows defender\\msmpresl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.406] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeda0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NisLog.dll", cAlternateFileName="")) returned 1 [0233.406] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\NisLog.dll" (normalized: "c:\\program files\\windows defender\\nislog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.410] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x538f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NisSrv.exe", cAlternateFileName="")) returned 1 [0233.411] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\NisSrv.exe" (normalized: "c:\\program files\\windows defender\\nissrv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.411] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NisWfp.dll", cAlternateFileName="")) returned 1 [0233.411] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\NisWfp.dll" (normalized: "c:\\program files\\windows defender\\niswfp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.411] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0233.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc922f8 [0233.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0x2756098 [0233.412] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1 [0233.412] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ProtectionManagement.dll" (normalized: "c:\\program files\\windows defender\\protectionmanagement.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.414] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement.mof", cAlternateFileName="")) returned 1 [0233.414] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ProtectionManagement.mof" (normalized: "c:\\program files\\windows defender\\protectionmanagement.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.416] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mof", cAlternateFileName="")) returned 1 [0233.416] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ProtectionManagement_Uninstall.mof" (normalized: "c:\\program files\\windows defender\\protectionmanagement_uninstall.mof"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.416] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x505a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0233.416] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\shellext.dll" (normalized: "c:\\program files\\windows defender\\shellext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.417] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SymSrv.dll", cAlternateFileName="")) returned 1 [0233.417] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\SymSrv.dll" (normalized: "c:\\program files\\windows defender\\symsrv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.417] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SymSrv.yes", cAlternateFileName="")) returned 1 [0233.418] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\SymSrv.yes" (normalized: "c:\\program files\\windows defender\\symsrv.yes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.418] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 1 [0233.419] CreateFileW (lpFileName="C:\\Program Files\\Windows Defender\\ThirdPartyNotices.txt" (normalized: "c:\\program files\\windows defender\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.419] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 0 [0233.419] FindClose (in: hFindFile=0xbba288 | out: hFindFile=0xbba288) returned 1 [0233.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf1a70800, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1a70800, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0233.420] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf1a70800, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1a70800, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.420] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de80260, ftCreationTime.dwHighDateTime=0x1d5e57b, ftLastAccessTime.dwLowDateTime=0xf52d5450, ftLastAccessTime.dwHighDateTime=0x1d5ceec, ftLastWriteTime.dwLowDateTime=0xf52d5450, ftLastWriteTime.dwHighDateTime=0x1d5ceec, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="alias.exe", cAlternateFileName="")) returned 1 [0233.420] CreateFileW (lpFileName="C:\\Program Files\\UNP\\alias.exe" (normalized: "c:\\program files\\unp\\alias.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.421] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CampaignManager", cAlternateFileName="CAMPAI~1")) returned 1 [0233.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92378 [0233.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x27570c8 [0233.421] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x68d576a8, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x68d576a8, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0233.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92388 [0233.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x27591c0 [0233.422] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1 [0233.422] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Task.xml" (normalized: "c:\\program files\\unp\\task.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0233.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92750 [0233.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc928c8 [0233.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0233.536] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0233.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92a30 [0233.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0233.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a30 | out: hHeap=0x2750000) returned 1 [0233.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0233.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0233.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.537] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0233.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc928c8 [0233.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc92918 [0233.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0233.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92918 | out: hHeap=0x2750000) returned 1 [0233.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0233.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0233.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92750 | out: hHeap=0x2750000) returned 1 [0233.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc86, lpOverlapped=0x0) returned 1 [0233.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff37a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc90, lpOverlapped=0x0) returned 1 [0233.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0233.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0233.541] CloseHandle (hObject=0x1f0) returned 1 [0233.685] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.685] SetEndOfFile (hFile=0x1e0) returned 1 [0233.810] MoveFileW (lpExistingFileName="C:\\Program Files\\UNP\\Task.xml" (normalized: "c:\\program files\\unp\\task.xml"), lpNewFileName="C:\\Program Files\\UNP\\Task.xml.vhd" (normalized: "c:\\program files\\unp\\task.xml.vhd")) returned 1 [0233.811] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a43100, ftCreationTime.dwHighDateTime=0x1d5a097, ftLastAccessTime.dwLowDateTime=0x5b3f9c10, ftLastAccessTime.dwHighDateTime=0x1d5874b, ftLastWriteTime.dwLowDateTime=0x5b3f9c10, ftLastWriteTime.dwHighDateTime=0x1d5874b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0233.811] CreateFileW (lpFileName="C:\\Program Files\\UNP\\thunderbird.exe" (normalized: "c:\\program files\\unp\\thunderbird.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.811] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced2f8e0, ftCreationTime.dwHighDateTime=0x1d593c9, ftLastAccessTime.dwLowDateTime=0x4bc85a50, ftLastAccessTime.dwHighDateTime=0x1d5de27, ftLastWriteTime.dwLowDateTime=0x4bc85a50, ftLastWriteTime.dwHighDateTime=0x1d5de27, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="types.exe", cAlternateFileName="")) returned 1 [0233.811] CreateFileW (lpFileName="C:\\Program Files\\UNP\\types.exe" (normalized: "c:\\program files\\unp\\types.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.812] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced2f8e0, ftCreationTime.dwHighDateTime=0x1d593c9, ftLastAccessTime.dwLowDateTime=0x4bc85a50, ftLastAccessTime.dwHighDateTime=0x1d5de27, ftLastWriteTime.dwLowDateTime=0x4bc85a50, ftLastWriteTime.dwHighDateTime=0x1d5de27, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="types.exe", cAlternateFileName="")) returned 0 [0233.812] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0233.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe9377169, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9377169, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0233.812] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe9377169, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9377169, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.812] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106e5820, ftCreationTime.dwHighDateTime=0x1d58188, ftLastAccessTime.dwLowDateTime=0x7a29150, ftLastAccessTime.dwHighDateTime=0x1d59b93, ftLastWriteTime.dwLowDateTime=0x7a29150, ftLastWriteTime.dwHighDateTime=0x1d59b93, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="death_persistent_strong.exe", cAlternateFileName="DEATH_~1.EXE")) returned 1 [0233.812] CreateFileW (lpFileName="C:\\Program Files\\Uninstall Information\\death_persistent_strong.exe" (normalized: "c:\\program files\\uninstall information\\death_persistent_strong.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0233.813] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106e5820, ftCreationTime.dwHighDateTime=0x1d58188, ftLastAccessTime.dwLowDateTime=0x7a29150, ftLastAccessTime.dwHighDateTime=0x1d59b93, ftLastWriteTime.dwLowDateTime=0x7a29150, ftLastWriteTime.dwHighDateTime=0x1d59b93, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="death_persistent_strong.exe", cAlternateFileName="DEATH_~1.EXE")) returned 0 [0233.813] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0233.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\rempl\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba188 [0233.813] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.814] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0233.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92308 [0233.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x38) returned 0x2759440 [0233.814] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76938800, ftCreationTime.dwHighDateTime=0x1d2e919, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x76938800, ftLastWriteTime.dwHighDateTime=0x1d2e919, nFileSizeHigh=0x0, nFileSizeLow=0xf2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rempl.xml", cAlternateFileName="")) returned 1 [0233.814] CreateFileW (lpFileName="C:\\Program Files\\rempl\\rempl.xml" (normalized: "c:\\program files\\rempl\\rempl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0233.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0233.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92750 [0233.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc928c8 [0233.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0233.828] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0233.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92a30 [0233.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc923b8 [0233.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a30 | out: hHeap=0x2750000) returned 1 [0233.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc923b8 | out: hHeap=0x2750000) returned 1 [0233.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0233.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.829] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0233.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc928c8 [0233.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc92918 [0233.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0233.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92918 | out: hHeap=0x2750000) returned 1 [0233.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0233.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0233.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0233.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92750 | out: hHeap=0x2750000) returned 1 [0233.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xf2c, lpOverlapped=0x0) returned 1 [0233.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff0d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xf30, lpOverlapped=0x0) returned 1 [0233.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0233.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0233.832] CloseHandle (hObject=0x1f0) returned 1 [0233.834] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0233.834] SetEndOfFile (hFile=0x1e0) returned 1 [0233.834] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\rempl.xml" (normalized: "c:\\program files\\rempl\\rempl.xml"), lpNewFileName="C:\\Program Files\\rempl\\rempl.xml.vhd" (normalized: "c:\\program files\\rempl\\rempl.xml.vhd")) returned 1 [0233.839] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a4a100, ftCreationTime.dwHighDateTime=0x1d3176b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x58a4a100, ftLastWriteTime.dwHighDateTime=0x1d3176b, nFileSizeHigh=0x0, nFileSizeLow=0x65008, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="remsh.exe", cAlternateFileName="")) returned 1 [0233.840] CreateFileW (lpFileName="C:\\Program Files\\rempl\\remsh.exe" (normalized: "c:\\program files\\rempl\\remsh.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0233.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92750 [0234.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc928c8 [0234.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0234.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0234.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92a30 [0234.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc923b8 [0234.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.026] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a30 | out: hHeap=0x2750000) returned 1 [0234.026] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc923b8 | out: hHeap=0x2750000) returned 1 [0234.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0234.026] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.026] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc928c8 [0234.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc92918 [0234.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0234.027] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92918 | out: hHeap=0x2750000) returned 1 [0234.027] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0234.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0234.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92750 | out: hHeap=0x2750000) returned 1 [0234.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.046] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.047] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.047] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.047] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1008, lpOverlapped=0x0) returned 1 [0234.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeff8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1010, lpOverlapped=0x0) returned 1 [0234.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.117] CloseHandle (hObject=0x1f0) returned 1 [0234.127] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.127] SetEndOfFile (hFile=0x1e0) returned 1 [0234.293] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\remsh.exe" (normalized: "c:\\program files\\rempl\\remsh.exe"), lpNewFileName="C:\\Program Files\\rempl\\remsh.exe.vhd" (normalized: "c:\\program files\\rempl\\remsh.exe.vhd")) returned 1 [0234.318] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unlock.xml", cAlternateFileName="")) returned 1 [0234.318] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Unlock.xml" (normalized: "c:\\program files\\rempl\\unlock.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92750 [0234.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc928c8 [0234.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0234.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0234.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92a30 [0234.333] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92218 [0234.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a30 | out: hHeap=0x2750000) returned 1 [0234.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92218 | out: hHeap=0x2750000) returned 1 [0234.333] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0234.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.333] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc928c8 [0234.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc92918 [0234.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0234.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92918 | out: hHeap=0x2750000) returned 1 [0234.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0234.335] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.335] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc928c8 [0234.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc928c8 | out: hHeap=0x2750000) returned 1 [0234.336] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92750 | out: hHeap=0x2750000) returned 1 [0234.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x605, lpOverlapped=0x0) returned 1 [0234.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff9fb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x610, lpOverlapped=0x0) returned 1 [0234.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.337] CloseHandle (hObject=0x1f0) returned 1 [0234.340] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.340] SetEndOfFile (hFile=0x1e0) returned 1 [0234.341] MoveFileW (lpExistingFileName="C:\\Program Files\\rempl\\Unlock.xml" (normalized: "c:\\program files\\rempl\\unlock.xml"), lpNewFileName="C:\\Program Files\\rempl\\Unlock.xml.vhd" (normalized: "c:\\program files\\rempl\\unlock.xml.vhd")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Unlock.xml", cAlternateFileName="")) returned 0 [0234.342] FindClose (in: hFindFile=0xbba188 | out: hFindFile=0xbba188) returned 1 [0234.342] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xec59b4f1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec59b4f1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0234.342] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xec59b4f1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec59b4f1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.343] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58438d0, ftCreationTime.dwHighDateTime=0x1d5ec36, ftLastAccessTime.dwLowDateTime=0xc8b3c9b0, ftLastAccessTime.dwHighDateTime=0x1d5dab1, ftLastWriteTime.dwLowDateTime=0xc8b3c9b0, ftLastWriteTime.dwHighDateTime=0x1d5dab1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0234.343] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\creditservice.exe" (normalized: "c:\\program files\\reference assemblies\\creditservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0234.343] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0234.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc922b8 [0234.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0xc92750 [0234.344] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251179b0, ftCreationTime.dwHighDateTime=0x1d57693, ftLastAccessTime.dwLowDateTime=0xf3446830, ftLastAccessTime.dwHighDateTime=0x1d5eb08, ftLastWriteTime.dwLowDateTime=0xf3446830, ftLastWriteTime.dwHighDateTime=0x1d5eb08, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0234.344] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\spcwin.exe" (normalized: "c:\\program files\\reference assemblies\\spcwin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0234.344] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251179b0, ftCreationTime.dwHighDateTime=0x1d57693, ftLastAccessTime.dwLowDateTime=0xf3446830, ftLastAccessTime.dwHighDateTime=0x1d5eb08, ftLastWriteTime.dwLowDateTime=0xf3446830, ftLastWriteTime.dwHighDateTime=0x1d5eb08, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 0 [0234.344] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0234.345] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0234.345] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.345] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0234.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc923b8 [0234.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x46) returned 0xc927b8 [0234.346] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0234.346] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0234.346] FindFirstFileW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0234.422] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.423] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9eac3a9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9eac3a9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf3efc600, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessible.tlb", cAlternateFileName="ACCESS~1.TLB")) returned 1 [0234.424] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\Accessible.tlb" (normalized: "c:\\program files\\mozilla firefox\\accessible.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.436] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0234.436] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc92980 [0234.436] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0234.436] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0234.436] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92ae8 [0234.436] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0234.436] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92980 | out: hHeap=0x2750000) returned 1 [0234.436] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0234.437] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0234.437] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92980 [0234.437] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92980 | out: hHeap=0x2750000) returned 1 [0234.437] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.437] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92980 [0234.437] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc929d0 [0234.437] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0234.438] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929d0 | out: hHeap=0x2750000) returned 1 [0234.438] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0234.439] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92980 | out: hHeap=0x2750000) returned 1 [0234.439] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92980 [0234.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92980 | out: hHeap=0x2750000) returned 1 [0234.440] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0234.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbc0, lpOverlapped=0x0) returned 1 [0234.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff440, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xbc0, lpOverlapped=0x0) returned 1 [0234.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.442] CloseHandle (hObject=0x1f0) returned 1 [0234.453] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.453] SetEndOfFile (hFile=0x1e0) returned 1 [0234.453] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\Accessible.tlb" (normalized: "c:\\program files\\mozilla firefox\\accessible.tlb"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\Accessible.tlb.vhd" (normalized: "c:\\program files\\mozilla firefox\\accessible.tlb.vhd")) returned 1 [0234.454] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae059bd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae059bd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x72516580, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1f1d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessibleHandler.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0234.454] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleHandler.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblehandler.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.513] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0234.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc92980 [0234.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0234.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0234.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92ae8 [0234.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0234.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92980 | out: hHeap=0x2750000) returned 1 [0234.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0234.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0234.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92980 [0234.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92980 | out: hHeap=0x2750000) returned 1 [0234.525] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0234.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0234.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0234.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0234.529] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0234.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.529] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0234.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x11d0, lpOverlapped=0x0) returned 1 [0234.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x11d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x11d0, lpOverlapped=0x0) returned 1 [0234.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.545] CloseHandle (hObject=0x1f0) returned 1 [0234.552] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.552] SetEndOfFile (hFile=0x1e0) returned 1 [0234.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleHandler.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblehandler.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleHandler.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\accessiblehandler.dll.vhd")) returned 1 [0234.554] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73829280, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x73d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~2.DLL")) returned 1 [0234.554] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblemarshal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.678] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0234.678] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0234.678] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0234.678] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0234.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0234.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0234.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0234.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0234.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.679] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93128 [0234.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0234.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0234.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0234.681] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93128 | out: hHeap=0x2750000) returned 1 [0234.681] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.682] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.682] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0234.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x13d0, lpOverlapped=0x0) returned 1 [0234.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x13d0, lpOverlapped=0x0) returned 1 [0234.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.688] CloseHandle (hObject=0x1f0) returned 1 [0234.691] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.691] SetEndOfFile (hFile=0x1e0) returned 1 [0234.691] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll" (normalized: "c:\\program files\\mozilla firefox\\accessiblemarshal.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\accessiblemarshal.dll.vhd")) returned 1 [0234.692] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0234.692] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-console-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.711] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0234.711] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0234.711] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0234.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0234.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0234.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0234.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0234.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0234.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.713] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929a8 [0234.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0234.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0234.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0234.826] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929a8 | out: hHeap=0x2750000) returned 1 [0234.826] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.826] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.826] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0234.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0234.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0234.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.832] CloseHandle (hObject=0x1f0) returned 1 [0234.836] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.836] SetEndOfFile (hFile=0x1e0) returned 1 [0234.837] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-console-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-console-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-console-l1-1-0.dll.vhd")) returned 1 [0234.838] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0234.838] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-datetime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0234.849] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0234.849] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0234.849] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0234.849] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0234.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0234.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0234.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0234.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0234.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.850] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.850] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0234.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d68 [0234.850] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0234.851] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0234.851] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.851] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0234.852] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d68 | out: hHeap=0x2750000) returned 1 [0234.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0234.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0234.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0234.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0234.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0234.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6c0, lpOverlapped=0x0) returned 1 [0234.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6c0, lpOverlapped=0x0) returned 1 [0234.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0234.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0234.858] CloseHandle (hObject=0x1f0) returned 1 [0234.860] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0234.860] SetEndOfFile (hFile=0x1e0) returned 1 [0234.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-datetime-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-datetime-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-datetime-l1-1-0.dll.vhd")) returned 1 [0234.861] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0234.861] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-debug-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0234.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0235.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0235.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0235.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0235.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.038] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.038] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0235.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.038] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0235.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0235.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0235.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6c0, lpOverlapped=0x0) returned 1 [0235.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6c0, lpOverlapped=0x0) returned 1 [0235.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.046] CloseHandle (hObject=0x1f0) returned 1 [0235.048] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.048] SetEndOfFile (hFile=0x1e0) returned 1 [0235.049] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-debug-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-debug-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-debug-l1-1-0.dll.vhd")) returned 1 [0235.050] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0235.050] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-errorhandling-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.050] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.063] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.063] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0235.065] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0235.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0235.066] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.066] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.066] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0235.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.066] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.066] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.067] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0235.067] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.067] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0235.067] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.067] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0235.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0235.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.069] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0235.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0235.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.172] CloseHandle (hObject=0x1f0) returned 1 [0235.176] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.176] SetEndOfFile (hFile=0x1e0) returned 1 [0235.177] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-errorhandling-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-errorhandling-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-errorhandling-l1-1-0.dll.vhd")) returned 1 [0235.178] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0235.178] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.192] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.192] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.193] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0235.193] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0235.193] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.193] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0235.193] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.193] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.193] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0235.193] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.193] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.194] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.194] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0235.194] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.194] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0235.194] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.194] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0235.195] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0235.195] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.195] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.196] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x16c0, lpOverlapped=0x0) returned 1 [0235.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x16c0, lpOverlapped=0x0) returned 1 [0235.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.200] CloseHandle (hObject=0x1f0) returned 1 [0235.326] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.326] SetEndOfFile (hFile=0x1e0) returned 1 [0235.493] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-1-0.dll.vhd")) returned 1 [0235.494] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0235.494] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.509] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.510] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.510] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0235.510] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0235.510] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.510] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0235.510] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.510] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0235.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.511] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0235.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0235.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0235.513] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0235.513] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.513] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.513] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.513] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0235.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0235.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.518] CloseHandle (hObject=0x1f0) returned 1 [0235.520] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.520] SetEndOfFile (hFile=0x1e0) returned 1 [0235.521] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l1-2-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l1-2-0.dll.vhd")) returned 1 [0235.521] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae9e352, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae9e352, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0235.522] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0235.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0235.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0235.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0235.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.538] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0235.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0235.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0235.618] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0235.619] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.619] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.619] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0235.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0235.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.632] CloseHandle (hObject=0x1f0) returned 1 [0235.634] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.634] SetEndOfFile (hFile=0x1e0) returned 1 [0235.634] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l2-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-file-l2-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-file-l2-1-0.dll.vhd")) returned 1 [0235.635] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0235.635] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-handle-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.637] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.638] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.639] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.640] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.646] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0235.647] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0235.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.647] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0235.647] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.648] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.648] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0235.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.648] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.648] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0235.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.649] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0235.649] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.649] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0235.650] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0235.650] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.650] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.650] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8b8, lpOverlapped=0x0) returned 1 [0235.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0235.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.655] CloseHandle (hObject=0x1f0) returned 1 [0235.655] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.656] SetEndOfFile (hFile=0x1e0) returned 1 [0235.656] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-handle-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-handle-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-handle-l1-1-0.dll.vhd")) returned 1 [0235.657] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0235.657] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0235.786] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0235.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0235.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0235.787] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.787] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.787] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93128 [0235.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0235.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0235.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93128 | out: hHeap=0x2750000) returned 1 [0235.793] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.793] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0235.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0235.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.800] CloseHandle (hObject=0x1f0) returned 1 [0235.800] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.800] SetEndOfFile (hFile=0x1e0) returned 1 [0235.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-heap-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-heap-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-heap-l1-1-0.dll.vhd")) returned 1 [0235.802] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0235.802] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-interlocked-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.808] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0235.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0235.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0235.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0235.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.815] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.815] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0235.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0235.816] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.816] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0235.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0235.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.817] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0235.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0235.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8b8, lpOverlapped=0x0) returned 1 [0235.910] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0235.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0235.911] CloseHandle (hObject=0x1f0) returned 1 [0235.912] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.912] SetEndOfFile (hFile=0x1e0) returned 1 [0235.912] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-interlocked-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-interlocked-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-interlocked-l1-1-0.dll.vhd")) returned 1 [0235.913] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0235.913] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-libraryloader-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0235.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0235.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0235.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0235.970] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0235.970] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0235.970] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0235.970] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0235.970] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0235.970] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92258 [0235.970] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.970] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0235.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92258 | out: hHeap=0x2750000) returned 1 [0235.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.971] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0235.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0235.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0235.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0235.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0235.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0235.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0235.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0235.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0235.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0235.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.137] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0236.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0236.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.139] CloseHandle (hObject=0x1f0) returned 1 [0236.140] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.140] SetEndOfFile (hFile=0x1e0) returned 1 [0236.140] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-libraryloader-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-libraryloader-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-libraryloader-l1-1-0.dll.vhd")) returned 1 [0236.141] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0236.141] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0236.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0236.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0236.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0236.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.155] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.155] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0236.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0236.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0236.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0236.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.158] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.158] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12c0, lpOverlapped=0x0) returned 1 [0236.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12c0, lpOverlapped=0x0) returned 1 [0236.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.165] CloseHandle (hObject=0x1f0) returned 1 [0236.165] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.165] SetEndOfFile (hFile=0x1e0) returned 1 [0236.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-localization-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-localization-l1-2-0.dll.vhd")) returned 1 [0236.168] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0236.168] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-memory-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0236.269] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0236.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0236.269] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0236.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.270] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0236.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0236.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0236.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0236.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0236.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0236.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.276] CloseHandle (hObject=0x1f0) returned 1 [0236.277] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.277] SetEndOfFile (hFile=0x1e0) returned 1 [0236.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-memory-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-memory-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-memory-l1-1-0.dll.vhd")) returned 1 [0236.278] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0236.278] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-namedpipe-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0236.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0236.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92358 [0236.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92358 | out: hHeap=0x2750000) returned 1 [0236.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.289] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0236.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0236.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0236.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0236.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0236.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0236.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.299] CloseHandle (hObject=0x1f0) returned 1 [0236.299] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.299] SetEndOfFile (hFile=0x1e0) returned 1 [0236.300] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-namedpipe-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-namedpipe-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-namedpipe-l1-1-0.dll.vhd")) returned 1 [0236.301] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0236.301] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processenvironment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.301] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0236.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0236.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0236.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0236.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.427] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92cc8 [0236.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0236.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0236.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92cc8 | out: hHeap=0x2750000) returned 1 [0236.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc0, lpOverlapped=0x0) returned 1 [0236.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcc0, lpOverlapped=0x0) returned 1 [0236.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.434] CloseHandle (hObject=0x1f0) returned 1 [0236.435] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.435] SetEndOfFile (hFile=0x1e0) returned 1 [0236.435] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processenvironment-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processenvironment-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processenvironment-l1-1-0.dll.vhd")) returned 1 [0236.437] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0236.437] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0236.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0236.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0236.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0236.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.453] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0236.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0236.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0236.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0236.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10c0, lpOverlapped=0x0) returned 1 [0236.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10c0, lpOverlapped=0x0) returned 1 [0236.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.558] CloseHandle (hObject=0x1f0) returned 1 [0236.559] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.559] SetEndOfFile (hFile=0x1e0) returned 1 [0236.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-0.dll.vhd")) returned 1 [0236.560] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0236.560] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0236.575] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0236.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0236.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0236.576] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.577] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.577] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d68 [0236.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0236.577] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0236.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d68 | out: hHeap=0x2750000) returned 1 [0236.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0236.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0236.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.584] CloseHandle (hObject=0x1f0) returned 1 [0236.585] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.585] SetEndOfFile (hFile=0x1e0) returned 1 [0236.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-1.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-processthreads-l1-1-1.dll.vhd")) returned 1 [0236.586] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0236.586] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-profile-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0236.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0236.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0236.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0236.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.674] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0236.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0236.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0236.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0236.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6c0, lpOverlapped=0x0) returned 1 [0236.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6c0, lpOverlapped=0x0) returned 1 [0236.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.681] CloseHandle (hObject=0x1f0) returned 1 [0236.682] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.682] SetEndOfFile (hFile=0x1e0) returned 1 [0236.682] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-profile-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-profile-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-profile-l1-1-0.dll.vhd")) returned 1 [0236.683] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0236.683] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.700] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.700] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0236.700] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0236.700] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.700] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92258 [0236.700] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92258 | out: hHeap=0x2750000) returned 1 [0236.701] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.701] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0236.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0236.702] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.702] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0236.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0236.806] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8b8, lpOverlapped=0x0) returned 1 [0236.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff748, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0236.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.811] CloseHandle (hObject=0x1f0) returned 1 [0236.812] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.812] SetEndOfFile (hFile=0x1e0) returned 1 [0236.812] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-rtlsupport-l1-1-0.dll.vhd")) returned 1 [0236.814] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0236.814] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0236.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0236.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0236.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0236.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0236.828] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0236.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0236.833] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0236.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0236.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0236.833] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.834] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0236.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92fe8 [0236.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0236.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0236.834] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.834] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0236.836] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92fe8 | out: hHeap=0x2750000) returned 1 [0236.836] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0236.836] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0236.836] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0236.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0236.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0236.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0236.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0236.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0236.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0236.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0236.841] CloseHandle (hObject=0x1f0) returned 1 [0236.841] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0236.841] SetEndOfFile (hFile=0x1e0) returned 1 [0236.841] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-string-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-string-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-string-l1-1-0.dll.vhd")) returned 1 [0236.843] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0236.843] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0237.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0237.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0237.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0237.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0237.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0237.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0237.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0237.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0237.029] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.030] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0237.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0237.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0237.030] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0237.030] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.031] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0237.032] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0237.032] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.032] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.032] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0237.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10c0, lpOverlapped=0x0) returned 1 [0237.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10c0, lpOverlapped=0x0) returned 1 [0237.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0237.038] CloseHandle (hObject=0x1f0) returned 1 [0237.039] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.039] SetEndOfFile (hFile=0x1e0) returned 1 [0237.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-1-0.dll.vhd")) returned 1 [0237.040] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0237.041] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0237.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.044] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.152] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0237.152] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0237.152] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0237.152] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0237.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0237.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0237.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0237.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0237.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.153] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0237.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929a8 [0237.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0237.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0237.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0237.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929a8 | out: hHeap=0x2750000) returned 1 [0237.156] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0237.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0237.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0237.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0237.201] CloseHandle (hObject=0x1f0) returned 1 [0237.201] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.201] SetEndOfFile (hFile=0x1e0) returned 1 [0237.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-2-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-synch-l1-2-0.dll.vhd")) returned 1 [0237.202] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0237.203] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-sysinfo-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0237.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0237.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0237.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0237.287] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0237.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0237.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0237.287] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0237.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0237.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.288] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0237.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0237.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0237.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0237.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0237.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0237.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0237.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc0, lpOverlapped=0x0) returned 1 [0237.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcc0, lpOverlapped=0x0) returned 1 [0237.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0237.456] CloseHandle (hObject=0x1f0) returned 1 [0237.457] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.457] SetEndOfFile (hFile=0x1e0) returned 1 [0237.458] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-sysinfo-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-sysinfo-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-sysinfo-l1-1-0.dll.vhd")) returned 1 [0237.459] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa93fe, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafa93fe, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0237.459] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0237.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0237.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0237.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0237.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0237.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0237.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0237.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0237.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0237.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.478] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.478] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0237.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0237.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0237.478] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0237.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0237.480] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0237.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0237.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0237.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0237.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0237.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0237.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0237.489] CloseHandle (hObject=0x1f0) returned 1 [0237.489] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.489] SetEndOfFile (hFile=0x1e0) returned 1 [0237.490] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-timezone-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-timezone-l1-1-0.dll.vhd")) returned 1 [0237.496] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0237.496] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-util-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0237.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0237.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0237.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0237.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0237.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0237.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0237.912] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0237.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0237.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0237.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0237.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0237.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.913] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.914] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0237.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0237.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0237.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0237.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0237.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0237.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0237.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0237.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0237.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0237.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0238.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0238.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0238.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0238.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8c0, lpOverlapped=0x0) returned 1 [0238.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8c0, lpOverlapped=0x0) returned 1 [0238.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0238.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0238.586] CloseHandle (hObject=0x1f0) returned 1 [0238.859] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.860] SetEndOfFile (hFile=0x1e0) returned 1 [0238.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-util-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-util-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-core-util-l1-1-0.dll.vhd")) returned 1 [0238.861] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0238.861] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0238.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0238.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.886] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0238.886] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0238.886] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0238.960] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0238.960] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0238.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0238.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0238.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0238.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0238.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.961] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0238.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d68 [0238.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0238.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0238.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0238.962] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d68 | out: hHeap=0x2750000) returned 1 [0238.962] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0238.963] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.963] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0238.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0238.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0238.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0238.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0238.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc0, lpOverlapped=0x0) returned 1 [0238.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcc0, lpOverlapped=0x0) returned 1 [0238.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0238.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0238.967] CloseHandle (hObject=0x1f0) returned 1 [0238.967] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.967] SetEndOfFile (hFile=0x1e0) returned 1 [0238.968] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-conio-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-conio-l1-1-0.dll.vhd")) returned 1 [0238.968] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0238.969] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0238.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0238.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0238.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0238.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0238.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27573e0 [0238.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27573e0 | out: hHeap=0x2750000) returned 1 [0238.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0238.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0238.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0238.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0238.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0238.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.980] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0238.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0238.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0238.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0238.980] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.980] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0238.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0238.981] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0238.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0238.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0238.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0238.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18c0, lpOverlapped=0x0) returned 1 [0239.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe740, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18c0, lpOverlapped=0x0) returned 1 [0239.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.011] CloseHandle (hObject=0x1f0) returned 1 [0239.011] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.011] SetEndOfFile (hFile=0x1e0) returned 1 [0239.012] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-convert-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-convert-l1-1-0.dll.vhd")) returned 1 [0239.013] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0239.013] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.050] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.051] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.055] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.055] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0239.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0239.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0239.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0239.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.056] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.056] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0239.056] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.057] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0239.057] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.057] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0239.058] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0239.058] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.058] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.058] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0239.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0239.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.284] CloseHandle (hObject=0x1f0) returned 1 [0239.284] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.284] SetEndOfFile (hFile=0x1e0) returned 1 [0239.285] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-environment-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-environment-l1-1-0.dll.vhd")) returned 1 [0239.286] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0239.286] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0239.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0239.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0239.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0239.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.295] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d18 [0239.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0239.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0239.296] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d18 | out: hHeap=0x2750000) returned 1 [0239.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10c0, lpOverlapped=0x0) returned 1 [0239.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10c0, lpOverlapped=0x0) returned 1 [0239.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.301] CloseHandle (hObject=0x1f0) returned 1 [0239.301] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.301] SetEndOfFile (hFile=0x1e0) returned 1 [0239.301] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-filesystem-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-filesystem-l1-1-0.dll.vhd")) returned 1 [0239.302] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0239.302] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92348 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92348 | out: hHeap=0x2750000) returned 1 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.309] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0239.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0239.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.311] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0239.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0239.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.314] CloseHandle (hObject=0x1f0) returned 1 [0239.314] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.314] SetEndOfFile (hFile=0x1e0) returned 1 [0239.314] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-heap-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-heap-l1-1-0.dll.vhd")) returned 1 [0239.315] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0239.315] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0239.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0239.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.322] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0239.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0239.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.323] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0239.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0239.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0239.324] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0239.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0239.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0239.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.408] CloseHandle (hObject=0x1f0) returned 1 [0239.408] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.408] SetEndOfFile (hFile=0x1e0) returned 1 [0239.571] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-locale-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-locale-l1-1-0.dll.vhd")) returned 1 [0239.572] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0239.572] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0239.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0239.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0239.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0239.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.584] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0239.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0239.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0239.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0239.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc0, lpOverlapped=0x0) returned 1 [0239.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcc0, lpOverlapped=0x0) returned 1 [0239.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.599] CloseHandle (hObject=0x1f0) returned 1 [0239.600] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.600] SetEndOfFile (hFile=0x1e0) returned 1 [0239.600] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-math-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-math-l1-1-0.dll.vhd")) returned 1 [0239.601] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x66b8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0239.601] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.641] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.642] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92258 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92258 | out: hHeap=0x2750000) returned 1 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.643] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.643] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.643] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0239.645] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0239.645] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.645] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.645] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6b8, lpOverlapped=0x0) returned 1 [0239.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff948, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6c0, lpOverlapped=0x0) returned 1 [0239.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.649] CloseHandle (hObject=0x1f0) returned 1 [0239.649] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.649] SetEndOfFile (hFile=0x1e0) returned 1 [0239.649] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-multibyte-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-multibyte-l1-1-0.dll.vhd")) returned 1 [0239.650] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0239.650] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0239.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0239.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0239.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0239.661] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.661] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.661] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0239.661] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.661] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0239.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0239.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0239.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x14c0, lpOverlapped=0x0) returned 1 [0239.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x14c0, lpOverlapped=0x0) returned 1 [0239.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.694] CloseHandle (hObject=0x1f0) returned 1 [0239.694] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.695] SetEndOfFile (hFile=0x1e0) returned 1 [0239.695] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-private-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-private-l1-1-0.dll.vhd")) returned 1 [0239.696] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0239.696] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0239.742] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92258 [0239.742] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.742] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.742] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92258 | out: hHeap=0x2750000) returned 1 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.742] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.742] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0239.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0239.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0239.744] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0239.744] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.744] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.744] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcc0, lpOverlapped=0x0) returned 1 [0239.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff340, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcc0, lpOverlapped=0x0) returned 1 [0239.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.841] CloseHandle (hObject=0x1f0) returned 1 [0239.841] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.841] SetEndOfFile (hFile=0x1e0) returned 1 [0239.841] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-process-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-process-l1-1-0.dll.vhd")) returned 1 [0239.842] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0239.842] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0239.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0239.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.853] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0239.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0239.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0239.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0239.855] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.855] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0239.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0239.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0239.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ac0, lpOverlapped=0x0) returned 1 [0239.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ac0, lpOverlapped=0x0) returned 1 [0239.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0239.858] CloseHandle (hObject=0x1f0) returned 1 [0239.858] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0239.858] SetEndOfFile (hFile=0x1e0) returned 1 [0239.858] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-runtime-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-runtime-l1-1-0.dll.vhd")) returned 1 [0239.859] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0239.859] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0239.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0239.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0239.982] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0239.982] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0239.982] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0239.982] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0239.982] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0239.982] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0239.983] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.983] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0239.983] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0239.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0239.983] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.983] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0239.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc930d8 [0239.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0239.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0239.984] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0239.984] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0240.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc930d8 | out: hHeap=0x2750000) returned 1 [0240.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0240.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc0, lpOverlapped=0x0) returned 1 [0240.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc0, lpOverlapped=0x0) returned 1 [0240.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0240.301] CloseHandle (hObject=0x1f0) returned 1 [0240.301] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.301] SetEndOfFile (hFile=0x1e0) returned 1 [0240.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-stdio-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-stdio-l1-1-0.dll.vhd")) returned 1 [0240.302] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0240.302] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0240.303] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0240.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0240.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0240.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.311] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93128 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0240.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0240.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0240.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93128 | out: hHeap=0x2750000) returned 1 [0240.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0240.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.316] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc0, lpOverlapped=0x0) returned 1 [0240.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc0, lpOverlapped=0x0) returned 1 [0240.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0240.318] CloseHandle (hObject=0x1f0) returned 1 [0240.318] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.318] SetEndOfFile (hFile=0x1e0) returned 1 [0240.318] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-string-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-string-l1-1-0.dll.vhd")) returned 1 [0240.319] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0240.319] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0240.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0240.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0240.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0240.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0240.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0240.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0240.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0240.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0240.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.331] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0240.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0240.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0240.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0240.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0240.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0240.333] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0240.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12c0, lpOverlapped=0x0) returned 1 [0240.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12c0, lpOverlapped=0x0) returned 1 [0240.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0240.375] CloseHandle (hObject=0x1f0) returned 1 [0240.376] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.376] SetEndOfFile (hFile=0x1e0) returned 1 [0240.376] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-time-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-time-l1-1-0.dll.vhd")) returned 1 [0240.378] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0b44c9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0b44c9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0240.378] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0240.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0240.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0240.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0240.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0240.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0240.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0240.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0240.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0240.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.389] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0240.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a98 [0240.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0240.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0240.390] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.390] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0240.390] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a98 | out: hHeap=0x2750000) returned 1 [0240.391] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.391] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.391] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0240.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.391] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.392] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xac0, lpOverlapped=0x0) returned 1 [0240.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff540, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xac0, lpOverlapped=0x0) returned 1 [0240.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0240.404] CloseHandle (hObject=0x1f0) returned 1 [0240.404] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.404] SetEndOfFile (hFile=0x1e0) returned 1 [0240.458] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-utility-l1-1-0.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\api-ms-win-crt-utility-l1-1-0.dll.vhd")) returned 1 [0240.459] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0da723, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf2260280, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0240.459] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files\\mozilla firefox\\application.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0240.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0240.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0240.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0240.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0240.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0240.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92208 [0240.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0240.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92208 | out: hHeap=0x2750000) returned 1 [0240.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.467] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0240.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0240.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0240.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0240.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0240.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0240.469] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0240.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2ce, lpOverlapped=0x0) returned 1 [0240.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd32, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2d0, lpOverlapped=0x0) returned 1 [0240.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0240.470] CloseHandle (hObject=0x1f0) returned 1 [0240.518] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.518] SetEndOfFile (hFile=0x1e0) returned 1 [0240.569] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\application.ini" (normalized: "c:\\program files\\mozilla firefox\\application.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\application.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\application.ini.vhd")) returned 1 [0240.570] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0240.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92208 [0240.570] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0x2756398 [0240.570] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0240.570] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec059fbc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec059fbc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x74b3bf80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2edd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0240.570] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0240.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0240.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0240.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0240.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0240.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0240.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0240.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92348 [0240.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0240.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92348 | out: hHeap=0x2750000) returned 1 [0240.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.658] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0240.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92fe8 [0240.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0240.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0240.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0240.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92fe8 | out: hHeap=0x2750000) returned 1 [0240.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0240.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0240.660] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0240.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0240.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0240.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdd0, lpOverlapped=0x0) returned 1 [0240.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0240.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xdd0, lpOverlapped=0x0) returned 1 [0240.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0240.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0240.979] CloseHandle (hObject=0x1f0) returned 1 [0240.979] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0240.979] SetEndOfFile (hFile=0x1e0) returned 1 [0241.104] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.exe" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.exe.vhd")) returned 1 [0241.105] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x690ecb80, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0241.105] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0241.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0241.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0241.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0241.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0241.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92258 [0241.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0241.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92258 | out: hHeap=0x2750000) returned 1 [0241.211] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0241.211] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.211] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0241.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a98 [0241.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0241.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0241.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0241.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a98 | out: hHeap=0x2750000) returned 1 [0241.213] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0241.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0241.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfa3, lpOverlapped=0x0) returned 1 [0241.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff05d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xfb0, lpOverlapped=0x0) returned 1 [0241.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0241.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0241.215] CloseHandle (hObject=0x1f0) returned 1 [0241.215] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.215] SetEndOfFile (hFile=0x1e0) returned 1 [0241.215] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.ini" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\crashreporter.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\crashreporter.ini.vhd")) returned 1 [0241.216] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0241.216] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll" (normalized: "c:\\program files\\mozilla firefox\\d3dcompiler_47.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0241.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0241.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0241.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0241.269] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0241.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0241.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0241.269] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0241.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0241.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0241.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.270] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0241.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0241.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0241.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0241.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0241.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0241.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0241.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0241.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0241.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0241.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.984] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0241.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0241.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0241.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.003] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.013] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.300] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.301] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.301] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0242.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0242.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0242.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.758] CloseHandle (hObject=0x1f0) returned 1 [0243.758] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.758] SetEndOfFile (hFile=0x1e0) returned 1 [0243.791] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll" (normalized: "c:\\program files\\mozilla firefox\\d3dcompiler_47.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\d3dcompiler_47.dll.vhd")) returned 1 [0243.792] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0243.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92258 [0243.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0x2756338 [0243.792] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0243.792] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files\\mozilla firefox\\dependentlibs.list"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.802] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc92808 [0243.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93188 [0243.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0243.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0243.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc932f0 [0243.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0243.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc932f0 | out: hHeap=0x2750000) returned 1 [0243.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0243.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0243.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.803] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0243.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0243.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93188 [0243.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0243.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0243.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0243.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93188 [0243.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92808 | out: hHeap=0x2750000) returned 1 [0243.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ee, lpOverlapped=0x0) returned 1 [0243.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f0, lpOverlapped=0x0) returned 1 [0243.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0243.824] CloseHandle (hObject=0x1f0) returned 1 [0243.824] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.824] SetEndOfFile (hFile=0x1e0) returned 1 [0243.827] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\dependentlibs.list" (normalized: "c:\\program files\\mozilla firefox\\dependentlibs.list"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\dependentlibs.list.vhd" (normalized: "c:\\program files\\mozilla firefox\\dependentlibs.list.vhd")) returned 1 [0243.828] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0243.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92218 [0243.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc92808 [0243.829] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0243.829] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.841] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0243.841] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0243.841] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0243.841] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0243.841] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0243.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0243.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0243.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.842] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0243.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a98 [0243.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0243.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0243.843] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0243.843] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0243.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a98 | out: hHeap=0x2750000) returned 1 [0243.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.844] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.852] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.878] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0243.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0243.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdd0, lpOverlapped=0x0) returned 1 [0243.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xdd0, lpOverlapped=0x0) returned 1 [0243.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0243.903] CloseHandle (hObject=0x1f0) returned 1 [0243.903] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.903] SetEndOfFile (hFile=0x1e0) returned 1 [0243.906] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe.vhd")) returned 1 [0243.907] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0f2926, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x25679200, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="firefox.VisualElementsManifest.xml", cAlternateFileName="FIREFO~1.XML")) returned 1 [0243.907] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.VisualElementsManifest.xml" (normalized: "c:\\program files\\mozilla firefox\\firefox.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.921] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0243.921] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0243.921] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0243.922] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0243.922] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.922] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0243.922] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0243.922] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.922] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0243.922] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.922] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.923] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0243.923] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0243.923] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0243.923] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0243.923] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0243.923] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0243.925] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0243.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.925] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.925] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.925] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.926] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x158, lpOverlapped=0x0) returned 1 [0243.926] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffea8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x160, lpOverlapped=0x0) returned 1 [0243.926] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0243.928] CloseHandle (hObject=0x1f0) returned 1 [0243.928] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.928] SetEndOfFile (hFile=0x1e0) returned 1 [0243.929] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\firefox.VisualElementsManifest.xml" (normalized: "c:\\program files\\mozilla firefox\\firefox.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\firefox.VisualElementsManifest.xml.vhd" (normalized: "c:\\program files\\mozilla firefox\\firefox.visualelementsmanifest.xml.vhd")) returned 1 [0243.930] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0243.930] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92358 [0243.930] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0x27573e0 [0243.930] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0243.930] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files\\mozilla firefox\\freebl3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.947] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.948] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.949] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.950] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0243.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0243.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0243.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0243.953] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0243.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.953] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0243.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0243.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0243.954] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.954] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.954] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0243.954] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d18 [0243.955] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0243.955] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0243.957] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0243.957] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0243.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d18 | out: hHeap=0x2750000) returned 1 [0243.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0243.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0243.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0243.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x383, lpOverlapped=0x0) returned 1 [0243.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0243.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x390, lpOverlapped=0x0) returned 1 [0243.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0243.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0243.961] CloseHandle (hObject=0x1f0) returned 1 [0243.961] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0243.961] SetEndOfFile (hFile=0x1e0) returned 1 [0244.024] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.chk" (normalized: "c:\\program files\\mozilla firefox\\freebl3.chk"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.chk.vhd" (normalized: "c:\\program files\\mozilla firefox\\freebl3.chk.vhd")) returned 1 [0244.025] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0244.026] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files\\mozilla firefox\\freebl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0244.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0244.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0244.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0244.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0244.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0244.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922a8 [0244.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0244.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922a8 | out: hHeap=0x2750000) returned 1 [0244.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0244.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0244.040] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0244.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0244.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0244.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0244.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0244.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0244.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc92870 [0244.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92870 | out: hHeap=0x2750000) returned 1 [0244.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0244.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.047] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.049] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.052] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.101] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.122] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.123] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.125] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.126] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.129] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.131] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x9d0, lpOverlapped=0x0) returned 1 [0244.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x9d0, lpOverlapped=0x0) returned 1 [0244.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.137] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0244.137] CloseHandle (hObject=0x1f0) returned 1 [0244.137] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.137] SetEndOfFile (hFile=0x1e0) returned 1 [0244.346] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files\\mozilla firefox\\freebl3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\freebl3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\freebl3.dll.vhd")) returned 1 [0244.363] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gmp-clearkey", cAlternateFileName="GMP-CL~1")) returned 1 [0244.363] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc922a8 [0244.363] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc92870 [0244.363] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1 [0244.363] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\IA2Marshal.dll" (normalized: "c:\\program files\\mozilla firefox\\ia2marshal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0244.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0244.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0244.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0244.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0244.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0244.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0244.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0244.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0244.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.377] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0244.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0244.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0244.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0244.378] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.378] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0244.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0244.379] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0244.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19d0, lpOverlapped=0x0) returned 1 [0244.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19d0, lpOverlapped=0x0) returned 1 [0244.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0244.411] CloseHandle (hObject=0x1f0) returned 1 [0244.411] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.411] SetEndOfFile (hFile=0x1e0) returned 1 [0244.412] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\IA2Marshal.dll" (normalized: "c:\\program files\\mozilla firefox\\ia2marshal.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\IA2Marshal.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\ia2marshal.dll.vhd")) returned 1 [0244.412] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cbc491, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xf7d369cb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7c77d82, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7492, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0244.413] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\install.log" (normalized: "c:\\program files\\mozilla firefox\\install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0244.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0244.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0244.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27572d8 [0244.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27572d8 | out: hHeap=0x2750000) returned 1 [0244.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0244.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0244.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0244.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0244.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.424] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0244.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92fe8 [0244.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0244.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0244.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0244.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92fe8 | out: hHeap=0x2750000) returned 1 [0244.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0244.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1492, lpOverlapped=0x0) returned 1 [0244.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb6e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x14a0, lpOverlapped=0x0) returned 1 [0244.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0244.432] CloseHandle (hObject=0x1f0) returned 1 [0244.432] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.433] SetEndOfFile (hFile=0x1e0) returned 1 [0244.433] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\install.log" (normalized: "c:\\program files\\mozilla firefox\\install.log"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\install.log.vhd" (normalized: "c:\\program files\\mozilla firefox\\install.log.vhd")) returned 1 [0244.434] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x79787380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd3d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lgpllibs.dll", cAlternateFileName="")) returned 1 [0244.434] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll" (normalized: "c:\\program files\\mozilla firefox\\lgpllibs.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0244.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0244.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0244.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0244.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0244.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0244.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0244.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0244.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0244.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.524] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0244.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0244.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0244.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0244.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0244.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0244.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0244.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x13d0, lpOverlapped=0x0) returned 1 [0244.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x13d0, lpOverlapped=0x0) returned 1 [0244.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0244.536] CloseHandle (hObject=0x1f0) returned 1 [0244.536] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.537] SetEndOfFile (hFile=0x1e0) returned 1 [0244.537] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll" (normalized: "c:\\program files\\mozilla firefox\\lgpllibs.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\lgpllibs.dll.vhd")) returned 1 [0244.538] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7aa9a080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x69d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0244.538] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files\\mozilla firefox\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0244.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0244.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0244.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0244.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0244.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0244.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0244.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0244.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0244.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.554] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0244.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929a8 [0244.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0244.554] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0244.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0244.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929a8 | out: hHeap=0x2750000) returned 1 [0244.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0244.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x9d0, lpOverlapped=0x0) returned 1 [0244.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x9d0, lpOverlapped=0x0) returned 1 [0244.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0244.582] CloseHandle (hObject=0x1f0) returned 1 [0244.582] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.582] SetEndOfFile (hFile=0x1e0) returned 1 [0244.582] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\libEGL.dll" (normalized: "c:\\program files\\mozilla firefox\\libegl.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\libEGL.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\libegl.dll.vhd")) returned 1 [0244.583] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7c736400, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1d5bd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0244.583] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files\\mozilla firefox\\libglesv2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0244.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0244.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0244.595] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0244.595] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0244.595] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0244.595] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0244.595] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0244.595] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0244.596] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.596] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0244.596] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0244.596] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.597] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0244.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0244.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0244.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0244.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0244.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0244.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0244.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0244.599] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0244.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0244.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.800] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.819] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.819] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.820] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.820] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.882] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.944] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.944] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.944] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.946] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0244.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0244.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0244.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1bd0, lpOverlapped=0x0) returned 1 [0245.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1bd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1bd0, lpOverlapped=0x0) returned 1 [0245.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0245.043] CloseHandle (hObject=0x1f0) returned 1 [0245.043] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.043] SetEndOfFile (hFile=0x1e0) returned 1 [0245.105] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll" (normalized: "c:\\program files\\mozilla firefox\\libglesv2.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\libglesv2.dll.vhd")) returned 1 [0245.106] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0245.106] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0245.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0245.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0245.137] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0245.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0245.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0245.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0245.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0245.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.138] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0245.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0245.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0245.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0245.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0245.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0245.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0245.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15d0, lpOverlapped=0x0) returned 1 [0245.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15d0, lpOverlapped=0x0) returned 1 [0245.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0245.225] CloseHandle (hObject=0x1f0) returned 1 [0245.226] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.226] SetEndOfFile (hFile=0x1e0) returned 1 [0245.226] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice.exe.vhd")) returned 1 [0245.227] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec18b2c8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec18b2c8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7ed5be00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x265a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0245.227] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.228] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.260] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.261] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.262] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.263] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.265] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0245.265] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0245.266] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0245.266] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0245.266] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0245.266] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0245.266] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.266] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0245.267] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0245.267] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.267] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.267] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0245.267] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0245.268] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0245.268] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0245.268] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.268] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0245.269] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0245.269] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0245.270] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.281] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.281] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.281] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.282] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.282] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.283] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.292] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5a8, lpOverlapped=0x0) returned 1 [0245.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x5b0, lpOverlapped=0x0) returned 1 [0245.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0245.295] CloseHandle (hObject=0x1f0) returned 1 [0245.295] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.295] SetEndOfFile (hFile=0x1e0) returned 1 [0245.313] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice_installer.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\maintenanceservice_installer.exe.vhd")) returned 1 [0245.314] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8006eb00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x963d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="minidump-analyzer.exe", cAlternateFileName="MINIDU~1.EXE")) returned 1 [0245.314] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe" (normalized: "c:\\program files\\mozilla firefox\\minidump-analyzer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.329] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0245.329] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0245.329] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0245.329] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0245.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0245.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0245.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0245.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0245.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.331] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0245.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d68 [0245.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0245.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0245.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0245.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d68 | out: hHeap=0x2750000) returned 1 [0245.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0245.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.512] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.512] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.512] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.513] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.514] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3d0, lpOverlapped=0x0) returned 1 [0245.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3d0, lpOverlapped=0x0) returned 1 [0245.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0245.516] CloseHandle (hObject=0x1f0) returned 1 [0245.517] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.517] SetEndOfFile (hFile=0x1e0) returned 1 [0245.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe" (normalized: "c:\\program files\\mozilla firefox\\minidump-analyzer.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\minidump-analyzer.exe.vhd")) returned 1 [0245.534] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x81d0ae80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x176bd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mozavcodec.dll", cAlternateFileName="MOZAVC~1.DLL")) returned 1 [0245.534] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavcodec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0245.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0245.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0245.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0245.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0245.545] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0245.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0245.545] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0245.546] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.546] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0245.546] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0245.546] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.546] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.546] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0245.546] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0245.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0245.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0245.547] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.547] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0245.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0245.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0245.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0245.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0245.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0245.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.568] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.569] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.576] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.627] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.628] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.628] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.630] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.631] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.640] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.640] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.644] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0245.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0245.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0245.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbd0, lpOverlapped=0x0) returned 1 [0246.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xbd0, lpOverlapped=0x0) returned 1 [0246.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.207] CloseHandle (hObject=0x1f0) returned 1 [0246.207] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.207] SetEndOfFile (hFile=0x1e0) returned 1 [0246.216] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavcodec.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\mozavcodec.dll.vhd")) returned 1 [0246.218] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8301db80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x299d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mozavutil.dll", cAlternateFileName="MOZAVU~1.DLL")) returned 1 [0246.219] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\mozavutil.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavutil.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.228] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0246.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0246.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0246.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0246.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.230] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0246.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0246.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0246.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0246.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0246.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19d0, lpOverlapped=0x0) returned 1 [0246.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19d0, lpOverlapped=0x0) returned 1 [0246.281] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.281] CloseHandle (hObject=0x1f0) returned 1 [0246.282] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.282] SetEndOfFile (hFile=0x1e0) returned 1 [0246.282] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\mozavutil.dll" (normalized: "c:\\program files\\mozilla firefox\\mozavutil.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\mozavutil.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\mozavutil.dll.vhd")) returned 1 [0246.283] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x84330880, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x269d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0246.283] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files\\mozilla firefox\\mozglue.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.284] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.284] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0246.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0246.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0246.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0246.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.360] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d18 [0246.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0246.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0246.361] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d18 | out: hHeap=0x2750000) returned 1 [0246.361] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.361] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.361] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0246.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x9d0, lpOverlapped=0x0) returned 1 [0246.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x9d0, lpOverlapped=0x0) returned 1 [0246.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.377] CloseHandle (hObject=0x1f0) returned 1 [0246.377] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.377] SetEndOfFile (hFile=0x1e0) returned 1 [0246.377] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files\\mozilla firefox\\mozglue.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\mozglue.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\mozglue.dll.vhd")) returned 1 [0246.378] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a940, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0246.378] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\msvcp140.dll" (normalized: "c:\\program files\\mozilla firefox\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0246.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0246.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0246.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0246.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.388] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0246.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0246.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0246.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0246.389] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.389] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0246.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x940, lpOverlapped=0x0) returned 1 [0246.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x940, lpOverlapped=0x0) returned 1 [0246.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.459] CloseHandle (hObject=0x1f0) returned 1 [0246.459] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.459] SetEndOfFile (hFile=0x1e0) returned 1 [0246.459] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\msvcp140.dll" (normalized: "c:\\program files\\mozilla firefox\\msvcp140.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\msvcp140.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\msvcp140.dll.vhd")) returned 1 [0246.460] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x85fccc00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x172fd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0246.460] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files\\mozilla firefox\\nss3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757438 [0246.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757438 | out: hHeap=0x2750000) returned 1 [0246.525] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0246.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0246.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.526] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0246.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.527] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0246.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0246.529] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0246.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.529] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.530] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0246.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.573] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.574] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.575] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.577] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.656] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.822] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfd0, lpOverlapped=0x0) returned 1 [0246.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff030, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xfd0, lpOverlapped=0x0) returned 1 [0246.824] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.824] CloseHandle (hObject=0x1f0) returned 1 [0246.825] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.825] SetEndOfFile (hFile=0x1e0) returned 1 [0246.854] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files\\mozilla firefox\\nss3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nss3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\nss3.dll.vhd")) returned 1 [0246.855] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x872df900, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x785d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0246.855] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files\\mozilla firefox\\nssckbi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.868] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.868] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0246.869] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0246.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0246.869] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.869] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.869] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0246.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.869] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.869] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0246.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.870] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0246.870] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.870] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0246.871] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0246.871] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.871] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.871] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0246.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.877] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.890] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.890] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.924] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.925] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.925] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.926] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.926] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.926] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0246.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0246.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5d0, lpOverlapped=0x0) returned 1 [0246.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x5d0, lpOverlapped=0x0) returned 1 [0246.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.941] CloseHandle (hObject=0x1f0) returned 1 [0246.941] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.941] SetEndOfFile (hFile=0x1e0) returned 1 [0246.963] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nssckbi.dll" (normalized: "c:\\program files\\mozilla firefox\\nssckbi.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nssckbi.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\nssckbi.dll.vhd")) returned 1 [0246.964] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0246.964] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0246.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0246.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0246.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0246.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.977] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.977] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0246.977] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.977] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0246.977] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.977] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0246.978] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0246.978] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.978] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.978] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0246.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x383, lpOverlapped=0x0) returned 1 [0246.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x390, lpOverlapped=0x0) returned 1 [0246.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0246.980] CloseHandle (hObject=0x1f0) returned 1 [0246.980] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0246.980] SetEndOfFile (hFile=0x1e0) returned 1 [0246.981] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.chk" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.chk"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.chk.vhd" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.chk.vhd")) returned 1 [0246.982] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1bfd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0246.982] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0246.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0246.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0246.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0246.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0246.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0246.998] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0246.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0246.998] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0246.998] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0246.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0246.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0246.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0246.999] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0246.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0246.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0246.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0247.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0247.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0247.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0247.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0247.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0247.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0247.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.052] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1fd0, lpOverlapped=0x0) returned 1 [0247.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe030, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1fd0, lpOverlapped=0x0) returned 1 [0247.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0247.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0247.060] CloseHandle (hObject=0x1f0) returned 1 [0247.061] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.061] SetEndOfFile (hFile=0x1e0) returned 1 [0247.061] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\nssdbm3.dll.vhd")) returned 1 [0247.062] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec249eb7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec249eb7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1196618, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0247.062] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files\\mozilla firefox\\omni.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0247.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0247.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0247.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0247.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0247.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0247.159] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0247.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0247.159] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0247.159] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0247.159] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0247.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0247.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0247.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0247.160] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0247.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0247.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0247.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0247.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0247.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0247.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0247.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0247.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0247.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0247.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0247.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.392] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.392] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.392] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.392] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.393] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.394] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.394] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.394] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.394] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.395] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.395] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.395] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.395] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.396] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.396] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.399] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.400] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.419] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.442] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.443] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.504] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.511] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.511] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.512] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.537] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.632] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0247.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0247.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0247.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.268] CloseHandle (hObject=0x1f0) returned 1 [0256.268] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.316] SetEndOfFile (hFile=0x1e0) returned 1 [0256.445] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\omni.ja" (normalized: "c:\\program files\\mozilla firefox\\omni.ja"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\omni.ja.vhd" (normalized: "c:\\program files\\mozilla firefox\\omni.ja.vhd")) returned 1 [0256.465] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec270127, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec270127, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x89905300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pingsender.exe", cAlternateFileName="PINGSE~1.EXE")) returned 1 [0256.465] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\pingsender.exe" (normalized: "c:\\program files\\mozilla firefox\\pingsender.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0256.683] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.683] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.683] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.683] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.683] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.683] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.683] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0256.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0256.702] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.702] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0256.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0256.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x17d0, lpOverlapped=0x0) returned 1 [0256.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe830, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x17d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x17d0, lpOverlapped=0x0) returned 1 [0256.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.835] CloseHandle (hObject=0x1f0) returned 1 [0256.835] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.835] SetEndOfFile (hFile=0x1e0) returned 1 [0256.835] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\pingsender.exe" (normalized: "c:\\program files\\mozilla firefox\\pingsender.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\pingsender.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\pingsender.exe.vhd")) returned 1 [0256.836] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0256.836] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files\\mozilla firefox\\platform.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0256.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.844] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc930d8 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0256.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0256.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc930d8 | out: hHeap=0x2750000) returned 1 [0256.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa6, lpOverlapped=0x0) returned 1 [0256.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff5a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb0, lpOverlapped=0x0) returned 1 [0256.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.849] CloseHandle (hObject=0x1f0) returned 1 [0256.849] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.849] SetEndOfFile (hFile=0x1e0) returned 1 [0256.849] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\platform.ini" (normalized: "c:\\program files\\mozilla firefox\\platform.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\platform.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\platform.ini.vhd")) returned 1 [0256.850] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8ac18000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x18bd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0256.850] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0256.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0256.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.861] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.861] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93128 [0256.861] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.861] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0256.861] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.861] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0256.862] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93128 | out: hHeap=0x2750000) returned 1 [0256.862] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.862] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.862] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbd0, lpOverlapped=0x0) returned 1 [0256.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff430, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xbd0, lpOverlapped=0x0) returned 1 [0256.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.872] CloseHandle (hObject=0x1f0) returned 1 [0256.872] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.872] SetEndOfFile (hFile=0x1e0) returned 1 [0256.874] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\plugin-container.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-container.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\plugin-container.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\plugin-container.exe.vhd")) returned 1 [0256.875] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec2bc5f9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec2bc5f9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8b5a1680, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x8dd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0256.875] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-hang-ui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.876] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.879] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.880] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.881] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.887] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.887] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.887] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0256.887] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0256.887] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.888] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.888] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.888] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.888] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.888] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.888] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.888] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.888] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0256.888] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0256.889] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.889] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0256.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0256.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.891] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.891] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.891] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdd0, lpOverlapped=0x0) returned 1 [0256.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff230, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xdd0, lpOverlapped=0x0) returned 1 [0256.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.897] CloseHandle (hObject=0x1f0) returned 1 [0256.897] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.898] SetEndOfFile (hFile=0x1e0) returned 1 [0256.898] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe" (normalized: "c:\\program files\\mozilla firefox\\plugin-hang-ui.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\plugin-hang-ui.exe.vhd")) returned 1 [0256.899] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xbc628460, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0256.899] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files\\mozilla firefox\\precomplete"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0256.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0256.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0256.914] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0256.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.915] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a98 [0256.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0256.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0256.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a98 | out: hHeap=0x2750000) returned 1 [0256.918] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfc7, lpOverlapped=0x0) returned 1 [0256.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff039, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xfd0, lpOverlapped=0x0) returned 1 [0256.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.921] CloseHandle (hObject=0x1f0) returned 1 [0256.921] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.921] SetEndOfFile (hFile=0x1e0) returned 1 [0256.923] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\precomplete" (normalized: "c:\\program files\\mozilla firefox\\precomplete"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\precomplete.vhd" (normalized: "c:\\program files\\mozilla firefox\\precomplete.vhd")) returned 1 [0256.924] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8c8b4380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x49d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qipcap64.dll", cAlternateFileName="")) returned 1 [0256.924] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\qipcap64.dll" (normalized: "c:\\program files\\mozilla firefox\\qipcap64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.927] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.927] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.927] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.927] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.938] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.938] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0256.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0256.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.939] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0256.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0256.940] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.940] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0256.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0256.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.943] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.943] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0256.944] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.944] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0256.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x9d0, lpOverlapped=0x0) returned 1 [0256.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x9d0, lpOverlapped=0x0) returned 1 [0256.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.946] CloseHandle (hObject=0x1f0) returned 1 [0256.946] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.946] SetEndOfFile (hFile=0x1e0) returned 1 [0256.947] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\qipcap64.dll" (normalized: "c:\\program files\\mozilla firefox\\qipcap64.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\qipcap64.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\qipcap64.dll.vhd")) returned 1 [0256.948] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xec53900, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0256.948] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files\\mozilla firefox\\removed-files"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.951] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.952] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.953] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0256.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0256.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.959] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.959] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.960] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.960] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.960] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.960] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.960] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.960] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc930d8 [0256.960] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.960] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0256.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0256.962] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc930d8 | out: hHeap=0x2750000) returned 1 [0256.962] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.962] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.962] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x286, lpOverlapped=0x0) returned 1 [0256.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd7a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x290, lpOverlapped=0x0) returned 1 [0256.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.963] CloseHandle (hObject=0x1f0) returned 1 [0256.964] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.964] SetEndOfFile (hFile=0x1e0) returned 1 [0256.964] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\removed-files" (normalized: "c:\\program files\\mozilla firefox\\removed-files"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\removed-files.vhd" (normalized: "c:\\program files\\mozilla firefox\\removed-files.vhd")) returned 1 [0256.965] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0256.965] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files\\mozilla firefox\\softokn3.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0256.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0256.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0256.975] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0256.975] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0256.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0256.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0256.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0256.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0256.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.976] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0256.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0256.977] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0256.977] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0256.977] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.977] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0256.978] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0256.978] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0256.978] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0256.978] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0256.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x383, lpOverlapped=0x0) returned 1 [0256.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc7d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x390, lpOverlapped=0x0) returned 1 [0256.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0256.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0256.980] CloseHandle (hObject=0x1f0) returned 1 [0256.980] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0256.980] SetEndOfFile (hFile=0x1e0) returned 1 [0256.980] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.chk" (normalized: "c:\\program files\\mozilla firefox\\softokn3.chk"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.chk.vhd" (normalized: "c:\\program files\\mozilla firefox\\softokn3.chk.vhd")) returned 1 [0256.987] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0256.987] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files\\mozilla firefox\\softokn3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0256.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0256.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.091] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0257.091] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0257.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc922c8 [0257.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc922c8 | out: hHeap=0x2750000) returned 1 [0257.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.092] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0257.093] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.093] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0257.093] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.093] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0257.094] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0257.094] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.094] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.094] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.101] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15d0, lpOverlapped=0x0) returned 1 [0257.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15d0, lpOverlapped=0x0) returned 1 [0257.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0257.116] CloseHandle (hObject=0x1f0) returned 1 [0257.116] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.116] SetEndOfFile (hFile=0x1e0) returned 1 [0257.117] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files\\mozilla firefox\\softokn3.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\softokn3.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\softokn3.dll.vhd")) returned 1 [0257.118] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xf36c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0257.118] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll" (normalized: "c:\\program files\\mozilla firefox\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0257.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.123] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757280 [0257.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757280 | out: hHeap=0x2750000) returned 1 [0257.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0257.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0257.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.130] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0257.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.130] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0257.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.130] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0257.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0257.131] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.131] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.132] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.132] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.133] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.135] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.135] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.136] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.136] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.138] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.138] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.143] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.143] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.144] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x16c0, lpOverlapped=0x0) returned 1 [0257.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe940, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x16c0, lpOverlapped=0x0) returned 1 [0257.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0257.201] CloseHandle (hObject=0x1f0) returned 1 [0257.201] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.201] SetEndOfFile (hFile=0x1e0) returned 1 [0257.202] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll" (normalized: "c:\\program files\\mozilla firefox\\ucrtbase.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\ucrtbase.dll.vhd")) returned 1 [0257.203] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0257.203] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc922c8 [0257.203] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0x27561b8 [0257.203] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0257.203] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files\\mozilla firefox\\update-settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0257.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.209] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0257.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0257.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x84, lpOverlapped=0x0) returned 1 [0257.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff7c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x90, lpOverlapped=0x0) returned 1 [0257.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0257.213] CloseHandle (hObject=0x1f0) returned 1 [0257.213] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.213] SetEndOfFile (hFile=0x1e0) returned 1 [0257.214] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\update-settings.ini" (normalized: "c:\\program files\\mozilla firefox\\update-settings.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\update-settings.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\update-settings.ini.vhd")) returned 1 [0257.214] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8eed9d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x579d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0257.214] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files\\mozilla firefox\\updater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0257.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757598 [0257.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757598 | out: hHeap=0x2750000) returned 1 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0257.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.221] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93128 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0257.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0257.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93128 | out: hHeap=0x2750000) returned 1 [0257.223] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.245] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.245] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.247] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19d0, lpOverlapped=0x0) returned 1 [0257.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe630, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.247] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19d0, lpOverlapped=0x0) returned 1 [0257.248] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0257.248] CloseHandle (hObject=0x1f0) returned 1 [0257.248] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.248] SetEndOfFile (hFile=0x1e0) returned 1 [0257.248] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\updater.exe" (normalized: "c:\\program files\\mozilla firefox\\updater.exe"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\updater.exe.vhd" (normalized: "c:\\program files\\mozilla firefox\\updater.exe.vhd")) returned 1 [0257.249] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0257.249] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files\\mozilla firefox\\updater.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0257.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0257.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0257.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0257.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0257.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.258] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0257.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0257.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0257.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0257.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4dd, lpOverlapped=0x0) returned 1 [0257.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4e0, lpOverlapped=0x0) returned 1 [0257.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0257.260] CloseHandle (hObject=0x1f0) returned 1 [0257.260] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.260] SetEndOfFile (hFile=0x1e0) returned 1 [0257.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\updater.ini" (normalized: "c:\\program files\\mozilla firefox\\updater.ini"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\updater.ini.vhd" (normalized: "c:\\program files\\mozilla firefox\\updater.ini.vhd")) returned 1 [0257.353] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x15750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0257.353] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll" (normalized: "c:\\program files\\mozilla firefox\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0257.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0257.366] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0257.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0257.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0257.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.367] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92cc8 [0257.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0257.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0257.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92cc8 | out: hHeap=0x2750000) returned 1 [0257.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.369] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1750, lpOverlapped=0x0) returned 1 [0257.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1750, lpOverlapped=0x0) returned 1 [0257.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0257.380] CloseHandle (hObject=0x1f0) returned 1 [0257.380] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.380] SetEndOfFile (hFile=0x1e0) returned 1 [0257.380] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll" (normalized: "c:\\program files\\mozilla firefox\\vcruntime140.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\vcruntime140.dll.vhd")) returned 1 [0257.381] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0257.381] CreateFileW (lpFileName="C:\\Program Files\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files\\mozilla firefox\\xul.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0257.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0257.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0257.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0257.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0257.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757178 [0257.463] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757178 | out: hHeap=0x2750000) returned 1 [0257.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0257.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92338 [0257.463] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0257.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92338 | out: hHeap=0x2750000) returned 1 [0257.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.464] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0257.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0257.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0257.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0257.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0257.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0257.469] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0257.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0257.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0257.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0257.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.596] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.619] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.621] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.625] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.626] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.640] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.640] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.643] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.644] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.646] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.646] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.647] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.648] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.648] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.649] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.651] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.651] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.652] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.653] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.655] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.655] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.731] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.735] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.750] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.751] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.756] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.756] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.757] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.758] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.776] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0257.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0257.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0257.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.078] CloseHandle (hObject=0x1f0) returned 1 [0259.078] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.079] SetEndOfFile (hFile=0x1e0) returned 1 [0259.080] MoveFileW (lpExistingFileName="C:\\Program Files\\Mozilla Firefox\\xul.dll" (normalized: "c:\\program files\\mozilla firefox\\xul.dll"), lpNewFileName="C:\\Program Files\\Mozilla Firefox\\xul.dll.vhd" (normalized: "c:\\program files\\mozilla firefox\\xul.dll.vhd")) returned 1 [0259.081] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0259.183] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0259.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office 15\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec5218dd, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5218dd, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0259.227] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec5218dd, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5218dd, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.228] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd2b740, ftCreationTime.dwHighDateTime=0x1d5e26f, ftLastAccessTime.dwLowDateTime=0x16b1f800, ftLastAccessTime.dwHighDateTime=0x1d5c1d3, ftLastWriteTime.dwLowDateTime=0x16b1f800, ftLastWriteTime.dwHighDateTime=0x1d5c1d3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0259.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\ccv_server.exe" (normalized: "c:\\program files\\microsoft office 15\\ccv_server.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.248] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 1 [0259.248] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92338 [0259.248] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc928d8 [0259.248] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf14059d0, ftCreationTime.dwHighDateTime=0x1d5d51a, ftLastAccessTime.dwLowDateTime=0x1a293fb0, ftLastAccessTime.dwHighDateTime=0x1d575bc, ftLastWriteTime.dwLowDateTime=0x1a293fb0, ftLastWriteTime.dwHighDateTime=0x1d575bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0259.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\notepad.exe" (normalized: "c:\\program files\\microsoft office 15\\notepad.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.249] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83653e0, ftCreationTime.dwHighDateTime=0x1d5b49a, ftLastAccessTime.dwLowDateTime=0xdb4c5510, ftLastAccessTime.dwHighDateTime=0x1d5b3ab, ftLastWriteTime.dwLowDateTime=0xdb4c5510, ftLastWriteTime.dwHighDateTime=0x1d5b3ab, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0259.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office 15\\webdrive.exe" (normalized: "c:\\program files\\microsoft office 15\\webdrive.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.249] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd83653e0, ftCreationTime.dwHighDateTime=0x1d5b49a, ftLastAccessTime.dwLowDateTime=0xdb4c5510, ftLastAccessTime.dwHighDateTime=0x1d5b3ab, ftLastWriteTime.dwLowDateTime=0xdb4c5510, ftLastWriteTime.dwHighDateTime=0x1d5b3ab, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0259.249] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0259.250] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe9350e8d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9350e8d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0259.250] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe9350e8d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9350e8d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.250] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0259.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0259.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0259.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0259.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0259.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0259.281] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0259.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0259.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92348 [0259.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0259.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92348 | out: hHeap=0x2750000) returned 1 [0259.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0259.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.282] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0259.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0259.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0259.283] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0259.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0259.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0259.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0259.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0259.284] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.284] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.311] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.316] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.344] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.369] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.369] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.369] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.370] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.391] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.391] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.439] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.440] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.440] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.441] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.442] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.442] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.445] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.706] CloseHandle (hObject=0x1f0) returned 1 [0259.706] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.706] SetEndOfFile (hFile=0x1e0) returned 1 [0259.708] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.vhd" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.vhd")) returned 1 [0259.709] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b88c830, ftCreationTime.dwHighDateTime=0x1d5ca49, ftLastAccessTime.dwLowDateTime=0x18d15df0, ftLastAccessTime.dwHighDateTime=0x1d5cb89, ftLastWriteTime.dwLowDateTime=0x18d15df0, ftLastWriteTime.dwHighDateTime=0x1d5cb89, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ellen rebound.exe", cAlternateFileName="ELLENR~1.EXE")) returned 1 [0259.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\ellen rebound.exe" (normalized: "c:\\program files\\microsoft office\\ellen rebound.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.709] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0259.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0259.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0259.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.713] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.718] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc93188 [0259.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc93300 [0259.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0259.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0259.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93468 [0259.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92348 [0259.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93468 | out: hHeap=0x2750000) returned 1 [0259.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92348 | out: hHeap=0x2750000) returned 1 [0259.719] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0259.719] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.720] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0259.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0259.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc93300 [0259.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0259.720] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.720] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0259.721] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0259.721] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc93300 [0259.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93300 | out: hHeap=0x2750000) returned 1 [0259.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93188 | out: hHeap=0x2750000) returned 1 [0259.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x119, lpOverlapped=0x0) returned 1 [0259.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffee7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x120, lpOverlapped=0x0) returned 1 [0259.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0259.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0259.723] CloseHandle (hObject=0x1f0) returned 1 [0259.723] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.723] SetEndOfFile (hFile=0x1e0) returned 1 [0259.724] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.vhd" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.vhd")) returned 1 [0259.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0259.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92348 [0259.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0x2756518 [0259.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0259.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92118 [0259.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0xc93188 [0259.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0259.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc921f8 [0259.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0x2757280 [0259.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0259.725] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0259.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe932aca9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe932aca9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0259.726] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe932aca9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe932aca9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.726] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632b2c00, ftCreationTime.dwHighDateTime=0x1d59d17, ftLastAccessTime.dwLowDateTime=0x55cde90, ftLastAccessTime.dwHighDateTime=0x1d589a1, ftLastWriteTime.dwLowDateTime=0x55cde90, ftLastWriteTime.dwHighDateTime=0x1d589a1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="attending-other.exe", cAlternateFileName="ATTEND~1.EXE")) returned 1 [0259.726] CreateFileW (lpFileName="C:\\Program Files\\Java\\attending-other.exe" (normalized: "c:\\program files\\java\\attending-other.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.726] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0259.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92068 [0259.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x46) returned 0xc930d8 [0259.727] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 0 [0259.727] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0259.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9304c3a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9304c3a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0259.727] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9304c3a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9304c3a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.727] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0259.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92078 [0259.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0x27560f8 [0259.728] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0259.728] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.730] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0259.730] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.730] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0259.730] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.732] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0259.732] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.732] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0259.732] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.733] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0259.733] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.734] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0259.734] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.734] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0259.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc921b8 [0259.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0x2756578 [0259.735] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1bcd320, ftCreationTime.dwHighDateTime=0x1d5a092, ftLastAccessTime.dwLowDateTime=0xf1c29ec0, ftLastAccessTime.dwHighDateTime=0x1d58a53, ftLastWriteTime.dwLowDateTime=0xf1c29ec0, ftLastWriteTime.dwHighDateTime=0x1d58a53, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pending_windsor_bouquet.exe", cAlternateFileName="PENDIN~1.EXE")) returned 1 [0259.735] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\pending_windsor_bouquet.exe" (normalized: "c:\\program files\\internet explorer\\pending_windsor_bouquet.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.735] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0259.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92088 [0259.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0x2756218 [0259.735] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0259.736] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.739] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0259.739] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0259.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0259.740] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.740] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bd72aa0, ftCreationTime.dwHighDateTime=0x1d5b916, ftLastAccessTime.dwLowDateTime=0xa131c950, ftLastAccessTime.dwHighDateTime=0x1d5e5ba, ftLastWriteTime.dwLowDateTime=0xa131c950, ftLastWriteTime.dwHighDateTime=0x1d5e5ba, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0259.740] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\bitkinex.exe" (normalized: "c:\\program files\\common files\\bitkinex.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.740] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0259.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92008 [0259.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0x2757438 [0259.741] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ddb9940, ftCreationTime.dwHighDateTime=0x1d5a7f0, ftLastAccessTime.dwLowDateTime=0xe4fde870, ftLastAccessTime.dwHighDateTime=0x1d5d14d, ftLastWriteTime.dwLowDateTime=0xe4fde870, ftLastWriteTime.dwHighDateTime=0x1d5d14d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 1 [0259.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\gmailnotifierpro.exe" (normalized: "c:\\program files\\common files\\gmailnotifierpro.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.741] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0259.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92138 [0259.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc931f8 [0259.741] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0259.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc921e8 [0259.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0x27572d8 [0259.742] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0259.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92198 [0259.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x2757598 [0259.742] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0259.742] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0259.742] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0259.742] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.742] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0259.742] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd11bce0, ftCreationTime.dwHighDateTime=0x1d56a4d, ftLastAccessTime.dwLowDateTime=0x45715b40, ftLastAccessTime.dwHighDateTime=0x1d5aa9a, ftLastWriteTime.dwLowDateTime=0x45715b40, ftLastWriteTime.dwHighDateTime=0x1d5aa9a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="graduallysealed.exe", cAlternateFileName="GRADUA~1.EXE")) returned 1 [0259.743] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\graduallysealed.exe" (normalized: "c:\\program files (x86)\\windowspowershell\\graduallysealed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.743] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0259.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92178 [0259.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc93260 [0259.743] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66449bb0, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x9d037330, ftLastAccessTime.dwHighDateTime=0x1d5909a, ftLastWriteTime.dwLowDateTime=0x9d037330, ftLastWriteTime.dwHighDateTime=0x1d5909a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0259.743] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\scriptftp.exe" (normalized: "c:\\program files (x86)\\windowspowershell\\scriptftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.743] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66449bb0, ftCreationTime.dwHighDateTime=0x1d5e09c, ftLastAccessTime.dwLowDateTime=0x9d037330, ftLastAccessTime.dwHighDateTime=0x1d5909a, ftLastWriteTime.dwLowDateTime=0x9d037330, ftLastWriteTime.dwHighDateTime=0x1d5909a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 0 [0259.744] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0259.744] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec331bb1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec331bb1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0259.744] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec331bb1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec331bb1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.744] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5496950, ftCreationTime.dwHighDateTime=0x1d5b009, ftLastAccessTime.dwLowDateTime=0xbfa8c720, ftLastAccessTime.dwHighDateTime=0x1d57eb4, ftLastWriteTime.dwLowDateTime=0xbfa8c720, ftLastWriteTime.dwHighDateTime=0x1d57eb4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1 [0259.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\filezilla.exe" (normalized: "c:\\program files (x86)\\windows portable devices\\filezilla.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.744] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0259.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows portable devices\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.745] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0259.745] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0259.745] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0259.745] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec548097, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec548097, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.745] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0259.745] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92188 [0259.746] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc932d0 [0259.746] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0c390, ftCreationTime.dwHighDateTime=0x1d581c6, ftLastAccessTime.dwLowDateTime=0x7350b580, ftLastAccessTime.dwHighDateTime=0x1d5834c, ftLastWriteTime.dwLowDateTime=0x7350b580, ftLastWriteTime.dwHighDateTime=0x1d5834c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0259.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\fpos.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\fpos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.746] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19340, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0259.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingDevices.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingdevices.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.746] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x1de400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0259.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\ImagingEngine.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\imagingengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.778] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x194200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0259.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoAcq.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoacq.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.779] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf69289, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cf69289, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cf69289, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0259.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoBase.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photobase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.779] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x18f7d52f, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17ce00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0259.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\PhotoViewer.dll" (normalized: "c:\\program files (x86)\\windows photo viewer\\photoviewer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.779] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13059a80, ftCreationTime.dwHighDateTime=0x1d5883b, ftLastAccessTime.dwLowDateTime=0xd53edc50, ftLastAccessTime.dwHighDateTime=0x1d5dada, ftLastWriteTime.dwLowDateTime=0xd53edc50, ftLastWriteTime.dwHighDateTime=0x1d5dada, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="try_sublimedirectory_accompanying.exe", cAlternateFileName="TRY_SU~1.EXE")) returned 1 [0259.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\try_sublimedirectory_accompanying.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\try_sublimedirectory_accompanying.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.780] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24de20, ftCreationTime.dwHighDateTime=0x1d5e03c, ftLastAccessTime.dwLowDateTime=0xa84b1920, ftLastAccessTime.dwHighDateTime=0x1d5e07f, ftLastWriteTime.dwLowDateTime=0xa84b1920, ftLastWriteTime.dwHighDateTime=0x1d5e07f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0259.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\whatsapp.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.780] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7bf0d70, ftCreationTime.dwHighDateTime=0x1d57b00, ftLastAccessTime.dwLowDateTime=0xdeb0d7b0, ftLastAccessTime.dwHighDateTime=0x1d58496, ftLastWriteTime.dwLowDateTime=0xdeb0d7b0, ftLastWriteTime.dwHighDateTime=0x1d58496, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1 [0259.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\yahoomessenger.exe" (normalized: "c:\\program files (x86)\\windows photo viewer\\yahoomessenger.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.781] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7bf0d70, ftCreationTime.dwHighDateTime=0x1d57b00, ftLastAccessTime.dwLowDateTime=0xdeb0d7b0, ftLastAccessTime.dwHighDateTime=0x1d58496, ftLastWriteTime.dwLowDateTime=0xdeb0d7b0, ftLastWriteTime.dwHighDateTime=0x1d58496, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 0 [0259.781] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0259.781] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0259.781] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.781] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0259.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92098 [0259.781] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc93340 [0259.781] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0259.782] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc921a8 [0259.782] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0xc933a8 [0259.782] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0259.782] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0259.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec59b4f1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec59b4f1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0259.782] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec59b4f1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec59b4f1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.782] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2708e320, ftCreationTime.dwHighDateTime=0x1d5b04a, ftLastAccessTime.dwLowDateTime=0x5c0b3960, ftLastAccessTime.dwHighDateTime=0x1d5b351, ftLastWriteTime.dwLowDateTime=0x5c0b3960, ftLastWriteTime.dwHighDateTime=0x1d5b351, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0259.782] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\omnipos.exe" (normalized: "c:\\program files (x86)\\windows multimedia platform\\omnipos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.782] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0259.783] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\sqmapi.dll" (normalized: "c:\\program files (x86)\\windows multimedia platform\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.783] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0259.783] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0259.783] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec4af2ab, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4af2ab, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0259.783] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec4af2ab, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4af2ab, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.783] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0259.783] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc920e8 [0259.783] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc93418 [0259.783] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0259.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc920d8 [0259.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc93488 [0259.784] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0259.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92148 [0259.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x76) returned 0xc934f8 [0259.784] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xab521500, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0259.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\mpvis.DLL" (normalized: "c:\\program files (x86)\\windows media player\\mpvis.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.785] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0259.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92018 [0259.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x78) returned 0xc93578 [0259.785] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x734ad200, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x1b8800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0259.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\setup_wm.exe" (normalized: "c:\\program files (x86)\\windows media player\\setup_wm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.794] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0259.794] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc921c8 [0259.794] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc935f8 [0259.794] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a144f30, ftCreationTime.dwHighDateTime=0x1d5953f, ftLastAccessTime.dwLowDateTime=0xd8abd630, ftLastAccessTime.dwHighDateTime=0x1d5b493, ftLastWriteTime.dwLowDateTime=0xd8abd630, ftLastWriteTime.dwHighDateTime=0x1d5b493, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0259.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\trillian.exe" (normalized: "c:\\program files (x86)\\windows media player\\trillian.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.795] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0259.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92168 [0259.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x76) returned 0xc93668 [0259.795] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe81e0c00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0259.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmlaunch.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmlaunch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.796] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0259.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpconfig.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.799] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x97ef800, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0259.799] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmplayer.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmplayer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.799] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc0c73f00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0259.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPMediaSharing.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpmediasharing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.800] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x3c74bc00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0259.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpnssci.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.800] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1a2f6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0259.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\WMPNSSUI.dll" (normalized: "c:\\program files (x86)\\windows media player\\wmpnssui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.800] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x30d5c500, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x10e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0259.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmprph.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmprph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.801] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0259.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\wmpshare.exe" (normalized: "c:\\program files (x86)\\windows media player\\wmpshare.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.801] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0259.801] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0259.802] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1abcca0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1abcca0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0259.802] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf1abcca0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf1abcca0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.802] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06b1ea0, ftCreationTime.dwHighDateTime=0x1d5b6da, ftLastAccessTime.dwLowDateTime=0xd7884210, ftLastAccessTime.dwHighDateTime=0x1d5a6cf, ftLastWriteTime.dwLowDateTime=0xd7884210, ftLastWriteTime.dwHighDateTime=0x1d5a6cf, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="car superior hawk.exe", cAlternateFileName="CARSUP~1.EXE")) returned 1 [0259.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\car superior hawk.exe" (normalized: "c:\\program files (x86)\\windows mail\\car superior hawk.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.803] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0259.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc921d8 [0259.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0xc943d8 [0259.804] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0259.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\msoe.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.805] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0259.806] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\MSOERES.dll" (normalized: "c:\\program files (x86)\\windows mail\\msoeres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.806] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd299ec80, ftCreationTime.dwHighDateTime=0x1d5b184, ftLastAccessTime.dwLowDateTime=0xd9cd6280, ftLastAccessTime.dwHighDateTime=0x1d5c7bd, ftLastWriteTime.dwLowDateTime=0xd9cd6280, ftLastWriteTime.dwHighDateTime=0x1d5c7bd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0259.806] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\mxslipstream.exe" (normalized: "c:\\program files (x86)\\windows mail\\mxslipstream.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.806] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0259.806] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\oeimport.dll" (normalized: "c:\\program files (x86)\\windows mail\\oeimport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.808] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d1b380, ftCreationTime.dwHighDateTime=0x1d58615, ftLastAccessTime.dwLowDateTime=0xab092b50, ftLastAccessTime.dwHighDateTime=0x1d5c2bd, ftLastWriteTime.dwLowDateTime=0xab092b50, ftLastWriteTime.dwHighDateTime=0x1d5c2bd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0259.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\outlook.exe" (normalized: "c:\\program files (x86)\\windows mail\\outlook.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.808] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cac3130, ftCreationTime.dwHighDateTime=0x1d58203, ftLastAccessTime.dwLowDateTime=0xd6b24010, ftLastAccessTime.dwHighDateTime=0x1d5c98f, ftLastWriteTime.dwLowDateTime=0xd6b24010, ftLastWriteTime.dwHighDateTime=0x1d5c98f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="perfume-idle.exe", cAlternateFileName="PERFUM~1.EXE")) returned 1 [0259.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\perfume-idle.exe" (normalized: "c:\\program files (x86)\\windows mail\\perfume-idle.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.809] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0259.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wab.exe" (normalized: "c:\\program files (x86)\\windows mail\\wab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.809] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0259.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabimp.dll" (normalized: "c:\\program files (x86)\\windows mail\\wabimp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.810] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0259.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\wabmig.exe" (normalized: "c:\\program files (x86)\\windows mail\\wabmig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.810] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0259.810] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0259.810] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0259.810] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9350e8d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9350e8d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0259.811] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9350e8d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9350e8d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.811] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd126770, ftCreationTime.dwHighDateTime=0x1d5dd80, ftLastAccessTime.dwLowDateTime=0xb8dedac0, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0xb8dedac0, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="approx_references.exe", cAlternateFileName="APPROX~1.EXE")) returned 1 [0259.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\approx_references.exe" (normalized: "c:\\program files (x86)\\windows defender\\approx_references.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.811] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0259.812] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92028 [0259.812] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc946f0 [0259.812] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa686fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa686fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa686fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0259.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\EppManifest.dll" (normalized: "c:\\program files (x86)\\windows defender\\eppmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.812] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee5007f7, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0259.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpAsDesc.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpasdesc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.813] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee441c33, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xae5a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0259.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.813] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee631ad5, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x177a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0259.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MpOAV.dll" (normalized: "c:\\program files (x86)\\windows defender\\mpoav.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.813] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee54ccae, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0259.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\MsMpLics.dll" (normalized: "c:\\program files (x86)\\windows defender\\msmplics.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.815] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0259.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92108 [0259.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0xc94758 [0259.815] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0259.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\shellext.dll" (normalized: "c:\\program files (x86)\\windows defender\\shellext.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.815] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 0 [0259.816] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0259.816] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xec4af2ab, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4af2ab, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba288 [0259.816] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xec4af2ab, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4af2ab, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.816] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68fc160, ftCreationTime.dwHighDateTime=0x1d581f4, ftLastAccessTime.dwLowDateTime=0xf2daa7e0, ftLastAccessTime.dwHighDateTime=0x1d5eb1e, ftLastWriteTime.dwLowDateTime=0xf2daa7e0, ftLastWriteTime.dwHighDateTime=0x1d5eb1e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0259.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\fling.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.817] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0259.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92038 [0259.817] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6c) returned 0xc947c0 [0259.817] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39adccf0, ftCreationTime.dwHighDateTime=0x1d590cb, ftLastAccessTime.dwLowDateTime=0x2cec0400, ftLastAccessTime.dwHighDateTime=0x1d5def0, ftLastWriteTime.dwLowDateTime=0x2cec0400, ftLastWriteTime.dwHighDateTime=0x1d5def0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0259.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\totalcmd.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\totalcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.817] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd470ae90, ftCreationTime.dwHighDateTime=0x1d5da24, ftLastAccessTime.dwLowDateTime=0x4b6326f0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0x4b6326f0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www_succeed_sw.exe", cAlternateFileName="WWW_SU~1.EXE")) returned 1 [0259.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\www_succeed_sw.exe" (normalized: "c:\\program files (x86)\\reference assemblies\\www_succeed_sw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.818] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd470ae90, ftCreationTime.dwHighDateTime=0x1d5da24, ftLastAccessTime.dwLowDateTime=0x4b6326f0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0x4b6326f0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www_succeed_sw.exe", cAlternateFileName="WWW_SU~1.EXE")) returned 0 [0259.818] FindClose (in: hFindFile=0xbba288 | out: hFindFile=0xbba288) returned 1 [0259.818] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe940fc30, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe940fc30, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0259.818] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe940fc30, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe940fc30, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.819] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe10c0, ftCreationTime.dwHighDateTime=0x1d569ff, ftLastAccessTime.dwLowDateTime=0x3f035450, ftLastAccessTime.dwHighDateTime=0x1d5664f, ftLastWriteTime.dwLowDateTime=0x3f035450, ftLastWriteTime.dwHighDateTime=0x1d5664f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ash_method.exe", cAlternateFileName="ASH_ME~1.EXE")) returned 1 [0259.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\ash_method.exe" (normalized: "c:\\program files (x86)\\msbuild\\ash_method.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.819] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0259.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc920c8 [0259.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0xc94618 [0259.819] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0259.819] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0259.820] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0259.820] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec3ca4f6, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec3ca4f6, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.820] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58443c0, ftCreationTime.dwHighDateTime=0x1d5daf5, ftLastAccessTime.dwLowDateTime=0x5990f2b0, ftLastAccessTime.dwHighDateTime=0x1d5c9db, ftLastWriteTime.dwLowDateTime=0x5990f2b0, ftLastWriteTime.dwHighDateTime=0x1d5c9db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0259.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\barca.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\barca.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.820] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb0e4770, ftCreationTime.dwHighDateTime=0x1d5c14f, ftLastAccessTime.dwLowDateTime=0xf5d0e2d0, ftLastAccessTime.dwHighDateTime=0x1d5a6d5, ftLastWriteTime.dwLowDateTime=0xf5d0e2d0, ftLastWriteTime.dwHighDateTime=0x1d5a6d5, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1 [0259.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\icq.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\icq.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.821] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0259.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92048 [0259.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x70) returned 0xc94838 [0259.821] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0259.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0259.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0259.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.898] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.899] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc948b0 [0259.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc94a28 [0259.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27575f0 [0259.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27575f0 | out: hHeap=0x2750000) returned 1 [0259.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94b90 [0259.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc920f8 [0259.915] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0259.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94b90 | out: hHeap=0x2750000) returned 1 [0259.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc920f8 | out: hHeap=0x2750000) returned 1 [0259.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94a28 [0259.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0259.916] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0259.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0259.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc94a28 [0259.916] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0259.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0259.916] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0259.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0259.917] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94a28 [0259.917] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0259.918] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc948b0 | out: hHeap=0x2750000) returned 1 [0259.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0259.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0259.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15d0, lpOverlapped=0x0) returned 1 [0259.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15d0, lpOverlapped=0x0) returned 1 [0259.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0259.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0259.973] CloseHandle (hObject=0x1f0) returned 1 [0259.973] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0259.974] SetEndOfFile (hFile=0x1e0) returned 1 [0259.974] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe.vhd")) returned 1 [0259.975] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0259.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0259.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0259.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0259.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0259.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0260.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc948b0 [0260.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc94a28 [0260.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0260.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0260.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94b90 [0260.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc920a8 [0260.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0260.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94b90 | out: hHeap=0x2750000) returned 1 [0260.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc920a8 | out: hHeap=0x2750000) returned 1 [0260.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94a28 [0260.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0260.003] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0260.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0260.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc94a28 [0260.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0260.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0260.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0260.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0260.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94a28 [0260.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0260.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc948b0 | out: hHeap=0x2750000) returned 1 [0260.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0260.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0260.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0260.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1e62, lpOverlapped=0x0) returned 1 [0260.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe19e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1e70, lpOverlapped=0x0) returned 1 [0260.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0260.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0260.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0260.682] CloseHandle (hObject=0x1f0) returned 1 [0260.682] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0260.682] SetEndOfFile (hFile=0x1e0) returned 1 [0260.683] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe.vhd")) returned 1 [0260.684] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0260.749] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0260.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0260.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0261.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0261.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0262.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc948b0 [0262.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc94a28 [0262.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757120 [0262.269] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757120 | out: hHeap=0x2750000) returned 1 [0262.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94b90 [0262.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc92128 [0262.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0262.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94b90 | out: hHeap=0x2750000) returned 1 [0262.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92128 | out: hHeap=0x2750000) returned 1 [0262.270] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94a28 [0262.270] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0262.271] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0262.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929a8 [0262.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc94a28 [0262.271] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0262.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0262.271] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0262.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929a8 | out: hHeap=0x2750000) returned 1 [0262.272] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc94a28 [0262.272] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94a28 | out: hHeap=0x2750000) returned 1 [0262.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc948b0 | out: hHeap=0x2750000) returned 1 [0262.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4dd, lpOverlapped=0x0) returned 1 [0262.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0262.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4e0, lpOverlapped=0x0) returned 1 [0262.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0262.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0262.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0263.136] CloseHandle (hObject=0x1f0) returned 1 [0263.286] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.413] SetEndOfFile (hFile=0x1e0) returned 1 [0263.464] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\updater.ini.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\updater.ini.vhd")) returned 1 [0263.516] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdab029e0, ftCreationTime.dwHighDateTime=0x1d5bed4, ftLastAccessTime.dwLowDateTime=0x5c20a5e0, ftLastAccessTime.dwHighDateTime=0x1d58c30, ftLastWriteTime.dwLowDateTime=0x5c20a5e0, ftLastWriteTime.dwHighDateTime=0x1d58c30, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="womens-installed-tramadol.exe", cAlternateFileName="WOMENS~1.EXE")) returned 1 [0263.571] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\womens-installed-tramadol.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\womens-installed-tramadol.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.572] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdab029e0, ftCreationTime.dwHighDateTime=0x1d5bed4, ftLastAccessTime.dwLowDateTime=0x5c20a5e0, ftLastAccessTime.dwHighDateTime=0x1d58c30, ftLastWriteTime.dwLowDateTime=0x5c20a5e0, ftLastWriteTime.dwHighDateTime=0x1d58c30, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="womens-installed-tramadol.exe", cAlternateFileName="WOMENS~1.EXE")) returned 0 [0263.657] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0263.733] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0263.734] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.734] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0263.802] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc920f8 [0263.802] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x80) returned 0xc948b0 [0263.802] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0263.802] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92058 [0263.802] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0xc94938 [0263.802] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0 [0263.802] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0263.803] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0263.803] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xec4890de, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec4890de, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.803] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9bd3d0, ftCreationTime.dwHighDateTime=0x1d5d87d, ftLastAccessTime.dwLowDateTime=0xad97ab50, ftLastAccessTime.dwHighDateTime=0x1d5b1db, ftLastWriteTime.dwLowDateTime=0xad97ab50, ftLastWriteTime.dwHighDateTime=0x1d5b1db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1 [0263.803] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\ncftp.exe" (normalized: "c:\\program files (x86)\\microsoft office\\ncftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.804] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13773d0, ftCreationTime.dwHighDateTime=0x1d5ba52, ftLastAccessTime.dwLowDateTime=0x173aa040, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x173aa040, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0263.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\skype.exe" (normalized: "c:\\program files (x86)\\microsoft office\\skype.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.804] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13773d0, ftCreationTime.dwHighDateTime=0x1d5ba52, ftLastAccessTime.dwLowDateTime=0x173aa040, ftLastAccessTime.dwHighDateTime=0x1d5e412, ftLastWriteTime.dwLowDateTime=0x173aa040, ftLastWriteTime.dwHighDateTime=0x1d5e412, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 0 [0263.804] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0263.804] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9377169, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9377169, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0263.804] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe9377169, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe9377169, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.804] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0263.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc920a8 [0263.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc949a0 [0263.805] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95261236, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95261236, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95261236, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0263.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files (x86)\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.805] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0263.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.805] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ie9props.propdesc", cAlternateFileName="")) returned 1 [0263.806] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ie9props.propdesc" (normalized: "c:\\program files (x86)\\internet explorer\\ie9props.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.807] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14fb6499, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x75e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0263.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.807] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95214d68, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95214d68, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95214d68, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0263.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files (x86)\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.807] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0263.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files (x86)\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.807] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8d39e400, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0263.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.808] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0263.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc920b8 [0263.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0xc94a08 [0263.808] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4645e3d0, ftCreationTime.dwHighDateTime=0x1d5d590, ftLastAccessTime.dwLowDateTime=0x342f8110, ftLastAccessTime.dwHighDateTime=0x1d5dde7, ftLastWriteTime.dwLowDateTime=0x342f8110, ftLastWriteTime.dwHighDateTime=0x1d5dde7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pts fin.exe", cAlternateFileName="PTSFIN~1.EXE")) returned 1 [0263.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\pts fin.exe" (normalized: "c:\\program files (x86)\\internet explorer\\pts fin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.808] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0263.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92128 [0263.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0xc94a70 [0263.808] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0263.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files (x86)\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.809] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0263.809] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0263.809] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xec5ba381, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5ba381, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba388 [0263.809] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xec5ba381, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec5ba381, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.809] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2890500, ftCreationTime.dwHighDateTime=0x1d571ae, ftLastAccessTime.dwLowDateTime=0x623a6f70, ftLastAccessTime.dwHighDateTime=0x1d5a0b1, ftLastWriteTime.dwLowDateTime=0x623a6f70, ftLastWriteTime.dwHighDateTime=0x1d5a0b1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1 [0263.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\absolutetelnet.exe" (normalized: "c:\\program files (x86)\\google\\absolutetelnet.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.810] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0263.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc92158 [0263.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x2757120 [0263.810] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0263.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d48 [0263.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc94438 [0263.810] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 1 [0263.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e48 [0263.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4c) returned 0x2757178 [0263.811] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90cb110, ftCreationTime.dwHighDateTime=0x1d5d299, ftLastAccessTime.dwLowDateTime=0x75a37b0, ftLastAccessTime.dwHighDateTime=0x1d5b1ce, ftLastWriteTime.dwLowDateTime=0x75a37b0, ftLastWriteTime.dwHighDateTime=0x1d5b1ce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0263.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\utg2.exe" (normalized: "c:\\program files (x86)\\google\\utg2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.811] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90cb110, ftCreationTime.dwHighDateTime=0x1d5d299, ftLastAccessTime.dwLowDateTime=0x75a37b0, ftLastAccessTime.dwHighDateTime=0x1d5b1ce, ftLastWriteTime.dwLowDateTime=0x75a37b0, ftLastWriteTime.dwHighDateTime=0x1d5b1ce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0263.811] FindClose (in: hFindFile=0xbba388 | out: hFindFile=0xbba388) returned 1 [0263.811] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec358bc3, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec358bc3, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0263.812] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec358bc3, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec358bc3, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.812] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0263.812] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94dc8 [0263.812] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x54) returned 0xc94318 [0263.812] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d49f0, ftCreationTime.dwHighDateTime=0x1d57226, ftLastAccessTime.dwLowDateTime=0x139ad100, ftLastAccessTime.dwHighDateTime=0x1d5d46b, ftLastWriteTime.dwLowDateTime=0x139ad100, ftLastWriteTime.dwHighDateTime=0x1d5d46b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0263.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\flashfxp.exe" (normalized: "c:\\program files (x86)\\common files\\flashfxp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.812] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e44a990, ftCreationTime.dwHighDateTime=0x1d58b19, ftLastAccessTime.dwLowDateTime=0x8be009e0, ftLastAccessTime.dwHighDateTime=0x1d58ce6, ftLastWriteTime.dwLowDateTime=0x8be009e0, ftLastWriteTime.dwHighDateTime=0x1d58ce6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hat.exe", cAlternateFileName="")) returned 1 [0263.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\hat.exe" (normalized: "c:\\program files (x86)\\common files\\hat.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.813] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0263.813] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e68 [0263.813] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0xc94678 [0263.813] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0263.813] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e58 [0263.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0xc94ee0 [0263.814] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0263.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d78 [0263.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc94f58 [0263.814] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0263.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d58 [0263.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc945b8 [0263.814] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0263.815] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0263.815] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec56df6d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec56df6d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba248 [0263.815] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec56df6d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec56df6d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.815] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1 [0263.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e78 [0263.816] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc95050 [0263.816] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff9f520, ftCreationTime.dwHighDateTime=0x1d592f7, ftLastAccessTime.dwLowDateTime=0xfd07ea60, ftLastAccessTime.dwHighDateTime=0x1d5aeac, ftLastWriteTime.dwLowDateTime=0xfd07ea60, ftLastWriteTime.dwHighDateTime=0x1d5aeac, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0263.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\isspos.exe" (normalized: "c:\\program files (x86)\\adobe\\isspos.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.816] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x609dc080, ftCreationTime.dwHighDateTime=0x1d58122, ftLastAccessTime.dwLowDateTime=0x6865ff70, ftLastAccessTime.dwHighDateTime=0x1d568d7, ftLastWriteTime.dwLowDateTime=0x6865ff70, ftLastWriteTime.dwHighDateTime=0x1d568d7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0263.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\pidgin.exe" (normalized: "c:\\program files (x86)\\adobe\\pidgin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.817] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd57ea8c0, ftCreationTime.dwHighDateTime=0x1d5b98e, ftLastAccessTime.dwLowDateTime=0x76ec9d60, ftLastAccessTime.dwHighDateTime=0x1d56823, ftLastWriteTime.dwLowDateTime=0x76ec9d60, ftLastWriteTime.dwHighDateTime=0x1d56823, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="species_gerald_cdna.exe", cAlternateFileName="SPECIE~1.EXE")) returned 1 [0263.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\species_gerald_cdna.exe" (normalized: "c:\\program files (x86)\\adobe\\species_gerald_cdna.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.817] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd57ea8c0, ftCreationTime.dwHighDateTime=0x1d5b98e, ftLastAccessTime.dwLowDateTime=0x76ec9d60, ftLastAccessTime.dwHighDateTime=0x1d56823, ftLastWriteTime.dwLowDateTime=0x76ec9d60, ftLastWriteTime.dwHighDateTime=0x1d56823, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="species_gerald_cdna.exe", cAlternateFileName="SPECIE~1.EXE")) returned 0 [0263.817] FindClose (in: hFindFile=0xbba248 | out: hFindFile=0xbba248) returned 1 [0263.817] FindFirstFileW (in: lpFileName="C:\\ProgramData\\WindowsHolographicDevices\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0263.821] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.821] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 1 [0263.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e88 [0263.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6c) returned 0xc957c8 [0263.821] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 0 [0263.821] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0263.821] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9ec8 [0263.822] FindNextFileW (in: hFindFile=0xbb9ec8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.822] FindNextFileW (in: hFindFile=0xbb9ec8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f700b83, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x6f700b83, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0263.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d08 [0263.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3c) returned 0xc95840 [0263.822] FindNextFileW (in: hFindFile=0xbb9ec8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f700b83, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x6f700b83, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0263.823] FindClose (in: hFindFile=0xbb9ec8 | out: hFindFile=0xbb9ec8) returned 1 [0263.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0263.823] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.823] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb735bdcd, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xb735bdcd, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0263.823] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e98 [0263.823] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4c) returned 0x27575f0 [0263.823] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb735bdcd, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xb735bdcd, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0263.824] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0263.824] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0263.824] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.825] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0263.825] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0263.825] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0263.827] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.827] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0263.827] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0263.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.954] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc95888 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc95a00 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0263.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95b68 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc94ea8 [0263.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95b68 | out: hHeap=0x2750000) returned 1 [0263.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94ea8 | out: hHeap=0x2750000) returned 1 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0263.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.961] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc95a00 [0263.961] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0263.961] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.962] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0263.963] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0263.963] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0263.963] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.963] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95888 | out: hHeap=0x2750000) returned 1 [0263.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x430, lpOverlapped=0x0) returned 1 [0263.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffbd0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x430, lpOverlapped=0x0) returned 1 [0263.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0263.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0263.964] CloseHandle (hObject=0x1f0) returned 1 [0263.964] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.964] SetEndOfFile (hFile=0x1e0) returned 1 [0263.965] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag.vhd")) returned 1 [0263.966] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0263.966] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0263.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0263.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0263.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc95888 [0263.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc95a00 [0263.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27576a0 | out: hHeap=0x2750000) returned 1 [0263.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95b68 [0263.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc94ea8 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95b68 | out: hHeap=0x2750000) returned 1 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94ea8 | out: hHeap=0x2750000) returned 1 [0263.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.974] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0263.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0263.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc95a00 [0263.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0263.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0263.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0263.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0263.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95888 | out: hHeap=0x2750000) returned 1 [0263.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x42c, lpOverlapped=0x0) returned 1 [0263.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffbd4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0263.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x430, lpOverlapped=0x0) returned 1 [0263.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0263.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0263.977] CloseHandle (hObject=0x1f0) returned 1 [0263.978] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0263.978] SetEndOfFile (hFile=0x1e0) returned 1 [0263.978] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag.vhd")) returned 1 [0263.979] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0263.979] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0263.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.015] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc95888 [0264.015] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc95a00 [0264.015] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0264.016] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0264.016] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95b68 [0264.016] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc94d68 [0264.016] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.016] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95b68 | out: hHeap=0x2750000) returned 1 [0264.016] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94d68 | out: hHeap=0x2750000) returned 1 [0264.016] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0264.016] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.016] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0264.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc95a00 [0264.017] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0264.017] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.017] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0264.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0264.018] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0264.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.018] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95888 | out: hHeap=0x2750000) returned 1 [0264.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x42f, lpOverlapped=0x0) returned 1 [0264.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffbd1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x430, lpOverlapped=0x0) returned 1 [0264.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.019] CloseHandle (hObject=0x1f0) returned 1 [0264.020] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.020] SetEndOfFile (hFile=0x1e0) returned 1 [0264.020] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag.vhd")) returned 1 [0264.021] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0264.021] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.045] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.046] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.047] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.048] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.049] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.049] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc95888 [0264.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc95a00 [0264.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0264.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0264.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95b68 [0264.050] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc94ea8 [0264.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95b68 | out: hHeap=0x2750000) returned 1 [0264.050] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc94ea8 | out: hHeap=0x2750000) returned 1 [0264.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0264.051] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.051] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0264.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc95a00 [0264.051] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0264.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.052] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0264.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0264.053] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc95a00 [0264.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95a00 | out: hHeap=0x2750000) returned 1 [0264.053] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc95888 | out: hHeap=0x2750000) returned 1 [0264.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3e5, lpOverlapped=0x0) returned 1 [0264.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3f0, lpOverlapped=0x0) returned 1 [0264.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.055] CloseHandle (hObject=0x1f0) returned 1 [0264.056] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.056] SetEndOfFile (hFile=0x1e0) returned 1 [0264.057] MoveFileW (lpExistingFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag"), lpNewFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.vhd" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag.vhd")) returned 1 [0264.058] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0 [0264.059] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0264.059] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0264.060] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.060] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0264.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94de8 [0264.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc95888 [0264.061] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d68 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x88) returned 0xc95930 [0264.061] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d18 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc959c0 [0264.061] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e18 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x88) returned 0xc95a68 [0264.061] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94db8 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0xc95af8 [0264.061] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d28 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0xc95ba0 [0264.061] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0264.061] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94dd8 [0264.062] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0xc95c48 [0264.062] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0264.062] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94ec8 [0264.062] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc95f10 [0264.064] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0264.064] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94da8 [0264.064] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc968e8 [0264.064] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0264.064] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d98 [0264.064] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc95fb8 [0264.064] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94ea8 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc95d18 [0264.065] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d88 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x88) returned 0xc96cf8 [0264.065] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94d38 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc96060 [0264.065] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0264.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e38 [0264.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0xc96450 [0264.066] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0264.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94df8 [0264.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x88) returned 0xc96d88 [0264.066] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0264.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94eb8 [0264.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x88) returned 0xc96e18 [0264.066] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0264.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e08 [0264.067] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x88) returned 0xc96ea8 [0264.067] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0264.067] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94e28 [0264.067] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x9e) returned 0xc96990 [0264.067] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0264.067] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0264.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0264.069] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.069] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0264.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c98 [0264.069] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0x2759640 [0264.069] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0264.069] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0264.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0264.073] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.073] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0264.073] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94cb8 [0264.073] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27576a0 [0264.074] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0264.074] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0264.074] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0264.075] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.075] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.076] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0264.076] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0264.076] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.076] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0264.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b78 [0264.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2759240 [0264.077] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0264.077] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0264.077] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0264.077] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.078] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0264.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94ca8 [0264.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x40) returned 0xc96f38 [0264.078] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0264.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b28 [0264.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0x2757e98 [0264.078] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0264.078] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0264.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94cf8 [0264.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x2759380 [0264.079] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0264.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94bf8 [0264.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x2759480 [0264.079] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0264.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94ce8 [0264.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x27593c0 [0264.079] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0264.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94cc8 [0264.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0xc92940 [0264.080] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0264.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c28 [0264.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x27594c0 [0264.080] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0264.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b08 [0264.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2e) returned 0xc96f80 [0264.080] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0264.080] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0264.081] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0264.081] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.081] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0264.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94bd8 [0264.081] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0xc96fb8 [0264.082] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0264.082] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0264.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94cd8 [0264.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2759500 [0264.082] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0264.082] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa218de04, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xa218de04, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0264.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c88 [0264.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0xc96ff0 [0264.082] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8b9144f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b9144f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0264.082] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94ba8 [0264.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x2759680 [0264.083] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0264.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b98 [0264.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x2758f80 [0264.083] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0264.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b18 [0264.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0x2758fc0 [0264.083] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0264.083] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c38 [0264.084] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0xc97028 [0264.084] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0264.084] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8c03b77, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c03b77, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0264.084] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b68 [0264.084] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2c) returned 0xc971d8 [0264.084] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0264.084] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0264.084] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6c4d382c, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6c4d382c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0264.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT" (normalized: "c:\\users\\fd1hvy\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0264.085] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b38 [0264.085] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0x2759000 [0264.085] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8f4af3d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8f4af3d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0264.085] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94bc8 [0264.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0xc97f58 [0264.086] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0264.086] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0264.086] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0264.086] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c48 [0264.087] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x38) returned 0xc97d98 [0264.087] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0264.087] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b48 [0264.087] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0xc980d8 [0264.087] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0264.087] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0264.087] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0264.087] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8ed87bb, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ed87bb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0264.087] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b58 [0264.087] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2e) returned 0xc97210 [0264.087] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8ed87bb, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ed87bb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0264.087] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0264.088] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0264.089] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.089] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0264.089] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94b88 [0264.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0xc93128 [0264.090] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0264.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94bb8 [0264.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0xc92fe8 [0264.090] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0 [0264.090] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0264.091] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0264.091] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.091] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0264.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94be8 [0264.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0xc98118 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c08 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x32) returned 0xc98298 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c18 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0xc98158 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c58 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0xc98418 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c68 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0xc97dd8 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc94c78 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2e) returned 0xc97328 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98500 [0264.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2e) returned 0xc97168 [0264.092] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0264.093] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0264.093] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0264.093] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.095] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.096] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.097] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.098] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.099] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.100] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98878 [0264.101] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc989f0 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0264.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98b58 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98660 [0264.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989f0 | out: hHeap=0x2750000) returned 1 [0264.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98b58 | out: hHeap=0x2750000) returned 1 [0264.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98660 | out: hHeap=0x2750000) returned 1 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc989f0 [0264.102] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989f0 | out: hHeap=0x2750000) returned 1 [0264.102] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929a8 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc989f0 [0264.102] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0264.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989f0 | out: hHeap=0x2750000) returned 1 [0264.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0264.103] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929a8 | out: hHeap=0x2750000) returned 1 [0264.103] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc989f0 [0264.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989f0 | out: hHeap=0x2750000) returned 1 [0264.104] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98878 | out: hHeap=0x2750000) returned 1 [0264.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.110] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.110] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.111] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.111] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.112] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.113] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.114] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.114] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.115] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0264.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.123] CloseHandle (hObject=0x1f0) returned 1 [0264.123] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.123] SetEndOfFile (hFile=0x1e0) returned 1 [0264.123] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.vhd" (normalized: "c:\\users\\default\\ntuser.dat.vhd")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0264.124] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0264.125] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc985c0 [0264.125] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x34) returned 0xc97e18 [0264.125] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0264.125] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0264.125] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0264.125] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98610 [0264.125] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3a) returned 0xc98878 [0264.125] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0264.125] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0264.125] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0264.127] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0264.127] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98620 [0264.127] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x30) returned 0xc972f0 [0264.127] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0264.127] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0264.127] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0264.128] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.128] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a5195, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0264.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98660 [0264.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0xc92d68 [0264.128] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a78b4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a78b4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xc981b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwcompatShared.txt", cAlternateFileName="HWCOMP~1.TXT")) returned 1 [0264.128] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0264.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0264.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0264.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0264.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0264.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0264.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0264.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0264.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.140] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0264.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0264.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0264.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0264.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0264.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.142] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0264.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.192] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.196] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.197] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.198] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.202] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x181b, lpOverlapped=0x0) returned 1 [0264.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe7e5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1820, lpOverlapped=0x0) returned 1 [0264.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.216] CloseHandle (hObject=0x1f0) returned 1 [0264.216] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.216] SetEndOfFile (hFile=0x1e0) returned 1 [0264.217] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt.vhd")) returned 1 [0264.218] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b1515, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0264.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98670 [0264.218] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x46) returned 0xc929a8 [0264.218] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ux", cAlternateFileName="")) returned 1 [0264.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc984e0 [0264.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x42) returned 0xc92cc8 [0264.219] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ux", cAlternateFileName="")) returned 0 [0264.219] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0264.219] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\dll2\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37e09b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0264.219] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37e09b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.219] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37e09b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37e09b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xb8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 1 [0264.219] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll2\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll2\\webservices.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0264.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0264.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0264.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0264.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0264.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985b0 [0264.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0264.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985b0 | out: hHeap=0x2750000) returned 1 [0264.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.230] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0264.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0264.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0264.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0264.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0264.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0264.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.247] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.248] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.248] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.249] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.261] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.270] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.320] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.344] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x400, lpOverlapped=0x0) returned 1 [0264.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x400, lpOverlapped=0x0) returned 1 [0264.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.347] CloseHandle (hObject=0x1f0) returned 1 [0264.363] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.363] SetEndOfFile (hFile=0x1e0) returned 1 [0264.385] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll2\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll2\\webservices.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll2\\webservices.dll.vhd" (normalized: "c:\\windows10upgrade\\dll2\\webservices.dll.vhd")) returned 1 [0264.387] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37e09b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37e09b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xb8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 0 [0264.387] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0264.459] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\dll1\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37926f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0264.460] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37926f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.460] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea376b75, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea376b75, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x204c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cosqueryxp.dll", cAlternateFileName="COSQUE~1.DLL")) returned 1 [0264.460] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll1\\cosqueryxp.dll" (normalized: "c:\\windows10upgrade\\dll1\\cosqueryxp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0264.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0264.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0264.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0264.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0264.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98680 [0264.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.536] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0264.536] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98680 | out: hHeap=0x2750000) returned 1 [0264.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.536] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.537] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0264.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0264.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0264.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0264.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0264.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.539] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0264.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4c8, lpOverlapped=0x0) returned 1 [0264.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4d0, lpOverlapped=0x0) returned 1 [0264.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.557] CloseHandle (hObject=0x1f0) returned 1 [0264.557] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.557] SetEndOfFile (hFile=0x1e0) returned 1 [0264.557] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll1\\cosqueryxp.dll" (normalized: "c:\\windows10upgrade\\dll1\\cosqueryxp.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll1\\cosqueryxp.dll.vhd" (normalized: "c:\\windows10upgrade\\dll1\\cosqueryxp.dll.vhd")) returned 1 [0264.559] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea377ed3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x3b0c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wdscore.dll", cAlternateFileName="")) returned 1 [0264.559] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll1\\wdscore.dll" (normalized: "c:\\windows10upgrade\\dll1\\wdscore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.572] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0264.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0264.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0264.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0264.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0264.573] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98680 [0264.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.573] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0264.574] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98680 | out: hHeap=0x2750000) returned 1 [0264.574] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.580] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0264.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0264.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0264.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0264.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0264.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0264.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.652] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.653] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10c8, lpOverlapped=0x0) returned 1 [0264.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef38, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10d0, lpOverlapped=0x0) returned 1 [0264.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.773] CloseHandle (hObject=0x1f0) returned 1 [0264.773] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.773] SetEndOfFile (hFile=0x1e0) returned 1 [0264.805] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll1\\wdscore.dll" (normalized: "c:\\windows10upgrade\\dll1\\wdscore.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll1\\wdscore.dll.vhd" (normalized: "c:\\windows10upgrade\\dll1\\wdscore.dll.vhd")) returned 1 [0264.807] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37926f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37926f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xe9ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 1 [0264.807] CreateFileW (lpFileName="C:\\Windows10Upgrade\\dll1\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll1\\webservices.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0264.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0264.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0264.818] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0264.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0264.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98680 [0264.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0264.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98680 | out: hHeap=0x2750000) returned 1 [0264.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.819] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0264.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0264.819] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0264.819] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.820] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0264.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0264.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0264.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.828] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.833] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.852] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.910] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.910] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ec8, lpOverlapped=0x0) returned 1 [0264.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1ed0, lpOverlapped=0x0) returned 1 [0264.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0264.941] CloseHandle (hObject=0x1f0) returned 1 [0264.941] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.942] SetEndOfFile (hFile=0x1e0) returned 1 [0264.943] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\dll1\\webservices.dll" (normalized: "c:\\windows10upgrade\\dll1\\webservices.dll"), lpNewFileName="C:\\Windows10Upgrade\\dll1\\webservices.dll.vhd" (normalized: "c:\\windows10upgrade\\dll1\\webservices.dll.vhd")) returned 1 [0264.946] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37926f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37926f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xe9ec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 0 [0264.946] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0264.946] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\2052\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0264.947] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.947] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea355be9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 1 [0264.947] CreateFileW (lpFileName="C:\\Windows10Upgrade\\2052\\DWINTL20.DLL" (normalized: "c:\\windows10upgrade\\2052\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0264.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0264.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.974] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.975] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.976] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0264.978] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0264.978] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0264.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0264.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0264.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0264.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0264.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0264.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0264.979] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.979] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.980] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0264.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0264.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0264.980] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0264.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.981] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0264.982] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0264.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0264.983] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0264.983] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0264.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0264.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0264.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0264.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0264.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.003] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.003] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xec8, lpOverlapped=0x0) returned 1 [0265.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff138, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xed0, lpOverlapped=0x0) returned 1 [0265.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.010] CloseHandle (hObject=0x1f0) returned 1 [0265.010] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.011] SetEndOfFile (hFile=0x1e0) returned 1 [0265.011] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\2052\\DWINTL20.DLL" (normalized: "c:\\windows10upgrade\\2052\\dwintl20.dll"), lpNewFileName="C:\\Windows10Upgrade\\2052\\DWINTL20.DLL.vhd" (normalized: "c:\\windows10upgrade\\2052\\dwintl20.dll.vhd")) returned 1 [0265.142] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea355be9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 0 [0265.142] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0265.153] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0265.158] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.158] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b4fa7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b4fa7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x397, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="block.png", cAlternateFileName="")) returned 1 [0265.158] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.161] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.162] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.163] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.164] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.165] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.166] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.167] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.169] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.170] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98640 [0265.170] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.170] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.170] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98640 | out: hHeap=0x2750000) returned 1 [0265.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.170] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.170] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0265.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.171] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0265.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0265.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0265.172] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.172] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x397, lpOverlapped=0x0) returned 1 [0265.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc69, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3a0, lpOverlapped=0x0) returned 1 [0265.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.174] CloseHandle (hObject=0x1f0) returned 1 [0265.174] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.174] SetEndOfFile (hFile=0x1e0) returned 1 [0265.174] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png.vhd")) returned 1 [0265.175] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b8a24, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b8a24, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x749e0600, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0x1ba8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bluelogo.png", cAlternateFileName="")) returned 1 [0265.175] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.185] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.186] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.187] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.188] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.188] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.188] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0265.188] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0265.188] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.188] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98540 [0265.188] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.188] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.188] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98540 | out: hHeap=0x2750000) returned 1 [0265.188] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.189] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.189] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.189] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0265.189] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.189] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0265.189] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.189] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0265.190] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0265.190] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.190] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.191] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.191] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ba8, lpOverlapped=0x0) returned 1 [0265.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe458, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1bb0, lpOverlapped=0x0) returned 1 [0265.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.205] CloseHandle (hObject=0x1f0) returned 1 [0265.206] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.206] SetEndOfFile (hFile=0x1e0) returned 1 [0265.219] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png.vhd")) returned 1 [0265.220] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b9dbd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b9dbd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bullet.png", cAlternateFileName="")) returned 1 [0265.221] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0265.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0265.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98580 [0265.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.235] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.235] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98580 | out: hHeap=0x2750000) returned 1 [0265.235] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.235] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.235] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.235] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0265.235] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.235] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0265.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0265.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0265.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdd, lpOverlapped=0x0) returned 1 [0265.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff23, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe0, lpOverlapped=0x0) returned 1 [0265.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.240] CloseHandle (hObject=0x1f0) returned 1 [0265.240] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.241] SetEndOfFile (hFile=0x1e0) returned 1 [0265.242] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png.vhd")) returned 1 [0265.244] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bb141, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bb141, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default.css", cAlternateFileName="")) returned 1 [0265.244] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0265.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0265.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984f0 [0265.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984f0 | out: hHeap=0x2750000) returned 1 [0265.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.257] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0265.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.257] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0265.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0265.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0265.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1687, lpOverlapped=0x0) returned 1 [0265.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe979, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1690, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1690, lpOverlapped=0x0) returned 1 [0265.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.260] CloseHandle (hObject=0x1f0) returned 1 [0265.261] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.261] SetEndOfFile (hFile=0x1e0) returned 1 [0265.266] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css.vhd")) returned 1 [0265.267] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bc4cd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bc4cd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xf44d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default.htm", cAlternateFileName="")) returned 1 [0265.267] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.281] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.281] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98540 [0265.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98540 | out: hHeap=0x2750000) returned 1 [0265.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.282] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0265.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0265.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.283] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0265.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0265.284] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.284] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.284] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.285] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.285] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.286] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.287] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x144d, lpOverlapped=0x0) returned 1 [0265.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffebb3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1450, lpOverlapped=0x0) returned 1 [0265.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.292] CloseHandle (hObject=0x1f0) returned 1 [0265.292] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.293] SetEndOfFile (hFile=0x1e0) returned 1 [0265.293] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm.vhd")) returned 1 [0265.294] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bd859, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bd859, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x13e24500, ftLastWriteTime.dwHighDateTime=0x1d2ee61, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_eos.css", cAlternateFileName="DEFAUL~1.CSS")) returned 1 [0265.294] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0265.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0265.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0265.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0265.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.309] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d18 [0265.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0265.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0265.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d18 | out: hHeap=0x2750000) returned 1 [0265.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1a2c, lpOverlapped=0x0) returned 1 [0265.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe5d4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1a30, lpOverlapped=0x0) returned 1 [0265.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.314] CloseHandle (hObject=0x1f0) returned 1 [0265.314] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.314] SetEndOfFile (hFile=0x1e0) returned 1 [0265.315] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css.vhd")) returned 1 [0265.316] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bff6c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bff6c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea75e900, ftLastWriteTime.dwHighDateTime=0x1d2ee61, nFileSizeHigh=0x0, nFileSizeLow=0xda3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_eos.htm", cAlternateFileName="DEFAUL~1.HTM")) returned 1 [0265.316] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0265.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0265.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0265.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0265.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.328] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.328] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0265.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.328] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0265.329] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.329] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0265.330] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0265.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.330] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.330] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1a3a, lpOverlapped=0x0) returned 1 [0265.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe5c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1a40, lpOverlapped=0x0) returned 1 [0265.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.337] CloseHandle (hObject=0x1f0) returned 1 [0265.337] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.337] SetEndOfFile (hFile=0x1e0) returned 1 [0265.337] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm.vhd")) returned 1 [0265.338] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c12fc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c12fc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1468, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_oobe.css", cAlternateFileName="DEFAUL~2.CSS")) returned 1 [0265.338] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.347] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.347] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.347] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x27571d0 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27571d0 | out: hHeap=0x2750000) returned 1 [0265.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98630 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98630 | out: hHeap=0x2750000) returned 1 [0265.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.348] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0265.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0265.350] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0265.350] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.350] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.350] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1468, lpOverlapped=0x0) returned 1 [0265.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb98, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1470, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1470, lpOverlapped=0x0) returned 1 [0265.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.352] CloseHandle (hObject=0x1f0) returned 1 [0265.352] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.352] SetEndOfFile (hFile=0x1e0) returned 1 [0265.353] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css.vhd")) returned 1 [0265.354] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c2685, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c2685, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x7f589b00, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0x100ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="default_oobe.htm", cAlternateFileName="DEFAUL~2.HTM")) returned 1 [0265.355] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0265.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0265.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98630 [0265.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98630 | out: hHeap=0x2750000) returned 1 [0265.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.368] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0265.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0265.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0265.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0265.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xae, lpOverlapped=0x0) returned 1 [0265.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb0, lpOverlapped=0x0) returned 1 [0265.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.380] CloseHandle (hObject=0x1f0) returned 1 [0265.380] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.380] SetEndOfFile (hFile=0x1e0) returned 1 [0265.381] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm.vhd")) returned 1 [0265.382] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3c4d9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea5f6eb5, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EULA", cAlternateFileName="")) returned 1 [0265.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98690 [0265.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4c) returned 0x27571d0 [0265.382] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eula.css", cAlternateFileName="")) returned 1 [0265.382] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.396] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.396] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.396] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98540 [0265.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98540 | out: hHeap=0x2750000) returned 1 [0265.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.398] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.398] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0265.398] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.398] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0265.398] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.398] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0265.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0265.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.400] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x52, lpOverlapped=0x0) returned 1 [0265.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x60, lpOverlapped=0x0) returned 1 [0265.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.404] CloseHandle (hObject=0x1f0) returned 1 [0265.404] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.404] SetEndOfFile (hFile=0x1e0) returned 1 [0265.406] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css.vhd")) returned 1 [0265.407] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetStarted.png", cAlternateFileName="GETSTA~1.PNG")) returned 1 [0265.407] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98510 [0265.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98510 | out: hHeap=0x2750000) returned 1 [0265.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.422] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0265.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0265.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0265.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0265.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xef0, lpOverlapped=0x0) returned 1 [0265.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff110, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xef0, lpOverlapped=0x0) returned 1 [0265.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.427] CloseHandle (hObject=0x1f0) returned 1 [0265.427] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.427] SetEndOfFile (hFile=0x1e0) returned 1 [0265.428] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png.vhd")) returned 1 [0265.429] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xfe3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GetStartedHoverOver.png", cAlternateFileName="GETSTA~2.PNG")) returned 1 [0265.429] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0265.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0265.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.445] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0265.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0265.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.446] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0265.447] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0265.447] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.447] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.447] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfe3, lpOverlapped=0x0) returned 1 [0265.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff01d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xff0, lpOverlapped=0x0) returned 1 [0265.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.468] CloseHandle (hObject=0x1f0) returned 1 [0265.468] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.468] SetEndOfFile (hFile=0x1e0) returned 1 [0265.475] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png.vhd")) returned 1 [0265.477] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x43f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="loading.gif", cAlternateFileName="")) returned 1 [0265.477] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.493] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.494] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98680 [0265.494] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.494] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.494] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98680 | out: hHeap=0x2750000) returned 1 [0265.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.495] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0265.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0265.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0265.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0265.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3f3, lpOverlapped=0x0) returned 1 [0265.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc0d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x400, lpOverlapped=0x0) returned 1 [0265.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.560] CloseHandle (hObject=0x1f0) returned 1 [0265.561] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.561] SetEndOfFile (hFile=0x1e0) returned 1 [0265.561] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif.vhd")) returned 1 [0265.562] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x749e0600, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0xe5d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lock.png", cAlternateFileName="")) returned 1 [0265.562] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0265.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0265.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98630 [0265.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98630 | out: hHeap=0x2750000) returned 1 [0265.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.584] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0265.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0265.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0265.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0265.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe5d, lpOverlapped=0x0) returned 1 [0265.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1a3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe60, lpOverlapped=0x0) returned 1 [0265.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.588] CloseHandle (hObject=0x1f0) returned 1 [0265.588] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.588] SetEndOfFile (hFile=0x1e0) returned 1 [0265.588] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png.vhd")) returned 1 [0265.590] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0265.590] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.602] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0265.603] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.603] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.603] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0265.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.603] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.603] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0265.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.603] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0265.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0265.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0265.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.608] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.608] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa33, lpOverlapped=0x0) returned 1 [0265.608] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff5cd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xa40, lpOverlapped=0x0) returned 1 [0265.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.609] CloseHandle (hObject=0x1f0) returned 1 [0265.610] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.610] SetEndOfFile (hFile=0x1e0) returned 1 [0265.611] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png.vhd")) returned 1 [0265.612] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="marketing.png", cAlternateFileName="MARKET~1.PNG")) returned 1 [0265.612] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc988c0 [0265.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98a38 [0265.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98ba0 [0265.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0265.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ba0 | out: hHeap=0x2750000) returned 1 [0265.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0265.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.631] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.632] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0265.632] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98a38 [0265.632] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0265.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0265.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0265.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98a38 [0265.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98a38 | out: hHeap=0x2750000) returned 1 [0265.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc988c0 | out: hHeap=0x2750000) returned 1 [0265.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ed, lpOverlapped=0x0) returned 1 [0265.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f0, lpOverlapped=0x0) returned 1 [0265.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.638] CloseHandle (hObject=0x1f0) returned 1 [0265.639] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.639] SetEndOfFile (hFile=0x1e0) returned 1 [0265.639] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png.vhd")) returned 1 [0265.641] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea60a72c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.WinJS", cAlternateFileName="MICROS~1.WIN")) returned 1 [0265.641] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98630 [0265.641] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc988c0 [0265.641] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea627c0d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea627c0d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x97e0d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetworkIssueFAQ.mht", cAlternateFileName="NETWOR~1.MHT")) returned 1 [0265.642] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.643] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98530 [0265.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98530 | out: hHeap=0x2750000) returned 1 [0265.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.660] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.660] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0265.660] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0265.660] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0265.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0265.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0265.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0265.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.686] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.687] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.721] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.721] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.722] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1e0d, lpOverlapped=0x0) returned 1 [0265.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe1f3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1e10, lpOverlapped=0x0) returned 1 [0265.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.728] CloseHandle (hObject=0x1f0) returned 1 [0265.728] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.729] SetEndOfFile (hFile=0x1e0) returned 1 [0265.730] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht.vhd")) returned 1 [0265.731] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea631830, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea631830, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x875, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NoNetworkConnection.png", cAlternateFileName="NONETW~1.PNG")) returned 1 [0265.731] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.743] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.748] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.748] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0265.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0265.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.749] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.750] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0265.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0265.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0265.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0265.751] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0265.752] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.752] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.752] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0265.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x875, lpOverlapped=0x0) returned 1 [0265.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff78b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x880, lpOverlapped=0x0) returned 1 [0265.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.754] CloseHandle (hObject=0x1f0) returned 1 [0265.754] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.754] SetEndOfFile (hFile=0x1e0) returned 1 [0265.755] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png.vhd")) returned 1 [0265.756] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea631830, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea631830, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NoNetworkConnectionHoverOver.png", cAlternateFileName="NONETW~2.PNG")) returned 1 [0265.756] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.757] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.767] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.768] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985e0 [0265.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.770] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985e0 | out: hHeap=0x2750000) returned 1 [0265.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.771] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0265.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0265.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0265.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0265.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0265.773] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.773] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.773] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0265.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8a4, lpOverlapped=0x0) returned 1 [0265.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff75c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8b0, lpOverlapped=0x0) returned 1 [0265.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.775] CloseHandle (hObject=0x1f0) returned 1 [0265.775] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.775] SetEndOfFile (hFile=0x1e0) returned 1 [0265.776] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png.vhd")) returned 1 [0265.777] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63c947, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pass.png", cAlternateFileName="")) returned 1 [0265.777] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98510 [0265.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98510 | out: hHeap=0x2750000) returned 1 [0265.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.789] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0265.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0265.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0265.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0265.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0265.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0265.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x71e, lpOverlapped=0x0) returned 1 [0265.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8e2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x720, lpOverlapped=0x0) returned 1 [0265.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.792] CloseHandle (hObject=0x1f0) returned 1 [0265.792] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.792] SetEndOfFile (hFile=0x1e0) returned 1 [0265.792] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png"), lpNewFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png.vhd" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png.vhd")) returned 1 [0265.793] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63c947, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pass.png", cAlternateFileName="")) returned 0 [0265.793] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0265.793] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\i386\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b2895, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0265.796] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b2895, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.796] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ab347, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ab347, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BiosBlocks.xml", cAlternateFileName="BIOSBL~1.XML")) returned 1 [0265.796] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\i386\\biosblocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.806] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.806] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.806] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.806] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984f0 [0265.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984f0 | out: hHeap=0x2750000) returned 1 [0265.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.807] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0265.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0265.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0265.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0265.808] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0265.809] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.809] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.809] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0265.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.813] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x600, lpOverlapped=0x0) returned 1 [0265.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x600, lpOverlapped=0x0) returned 1 [0265.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.819] CloseHandle (hObject=0x1f0) returned 1 [0265.819] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.819] SetEndOfFile (hFile=0x1e0) returned 1 [0265.819] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\i386\\biosblocks.xml"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\biosblocks.xml.vhd")) returned 1 [0265.820] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ac6e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ac6e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x4071, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwcompat.txt", cAlternateFileName="")) returned 1 [0265.820] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwcompat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.821] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.832] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.833] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.834] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.834] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.835] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.835] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985a0 [0265.835] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.835] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.835] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985a0 | out: hHeap=0x2750000) returned 1 [0265.835] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.835] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.835] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0265.835] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ae8 [0265.836] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0265.836] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0265.836] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.836] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0265.838] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ae8 | out: hHeap=0x2750000) returned 1 [0265.838] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.838] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.838] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0265.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0265.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0265.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x71, lpOverlapped=0x0) returned 1 [0265.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff8f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x80, lpOverlapped=0x0) returned 1 [0265.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0265.843] CloseHandle (hObject=0x1f0) returned 1 [0265.844] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0265.844] SetEndOfFile (hFile=0x1e0) returned 1 [0265.844] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwcompat.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\hwcompat.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwcompat.txt.vhd")) returned 1 [0265.845] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ada69, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ada69, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwexclude.txt", cAlternateFileName="HWEXCL~1.TXT")) returned 1 [0265.845] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwexclude.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0265.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0265.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.924] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0265.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0265.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0265.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0265.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0265.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0265.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985d0 [0265.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0265.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0265.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985d0 | out: hHeap=0x2750000) returned 1 [0265.999] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0265.999] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.000] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0266.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0266.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0266.001] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0266.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.001] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.001] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8d7, lpOverlapped=0x0) returned 1 [0266.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff729, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x8e0, lpOverlapped=0x0) returned 1 [0266.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.103] CloseHandle (hObject=0x1f0) returned 1 [0266.104] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.104] SetEndOfFile (hFile=0x1e0) returned 1 [0266.121] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwexclude.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\hwexclude.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\hwexclude.txt.vhd")) returned 1 [0266.122] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3aedef, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3aedef, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2684, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.cat", cAlternateFileName="")) returned 1 [0266.123] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.147] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98600 [0266.147] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.147] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.147] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98600 | out: hHeap=0x2750000) returned 1 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.147] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.147] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0266.147] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0266.148] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.148] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0266.148] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0266.148] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.149] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.149] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x684, lpOverlapped=0x0) returned 1 [0266.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff97c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x690, lpOverlapped=0x0) returned 1 [0266.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.224] CloseHandle (hObject=0x1f0) returned 1 [0266.224] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.225] SetEndOfFile (hFile=0x1e0) returned 1 [0266.226] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.cat"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.cat.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.cat.vhd")) returned 1 [0266.227] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b017f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b017f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.inf", cAlternateFileName="")) returned 1 [0266.227] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985a0 [0266.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985a0 | out: hHeap=0x2750000) returned 1 [0266.236] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.236] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.236] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0266.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.237] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0266.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.237] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0266.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0266.238] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.238] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5d7, lpOverlapped=0x0) returned 1 [0266.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x5e0, lpOverlapped=0x0) returned 1 [0266.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.239] CloseHandle (hObject=0x1f0) returned 1 [0266.239] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.239] SetEndOfFile (hFile=0x1e0) returned 1 [0266.239] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.inf"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\nxquery.inf.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.inf.vhd")) returned 1 [0266.240] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b2895, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b2895, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x4eb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 1 [0266.240] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\i386\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.251] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.251] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.251] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0266.251] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0266.251] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.251] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0266.251] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.251] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0266.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.252] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0266.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.252] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0266.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.252] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0266.253] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0266.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.253] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.253] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xeb0, lpOverlapped=0x0) returned 1 [0266.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff150, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xeb0, lpOverlapped=0x0) returned 1 [0266.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.268] CloseHandle (hObject=0x1f0) returned 1 [0266.268] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.268] SetEndOfFile (hFile=0x1e0) returned 1 [0266.269] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\i386\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.sys"), lpNewFileName="C:\\Windows10Upgrade\\resources\\i386\\NXQuery.sys.vhd" (normalized: "c:\\windows10upgrade\\resources\\i386\\nxquery.sys.vhd")) returned 1 [0266.270] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b2895, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b2895, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x4eb0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 0 [0266.270] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0266.287] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a652e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0266.289] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a652e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39b5b0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39b5b0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x16ebc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BiosBlocks.xml", cAlternateFileName="BIOSBL~1.XML")) returned 1 [0266.289] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\amd64\\biosblocks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.308] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0266.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0266.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.309] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92d18 [0266.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0266.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0266.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92d18 | out: hHeap=0x2750000) returned 1 [0266.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.310] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.310] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xebc, lpOverlapped=0x0) returned 1 [0266.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff144, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xec0, lpOverlapped=0x0) returned 1 [0266.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.334] CloseHandle (hObject=0x1f0) returned 1 [0266.335] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.335] SetEndOfFile (hFile=0x1e0) returned 1 [0266.335] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml" (normalized: "c:\\windows10upgrade\\resources\\amd64\\biosblocks.xml"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\biosblocks.xml.vhd")) returned 1 [0266.336] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39c8ec, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39c8ec, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x11daf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwcompat.txt", cAlternateFileName="")) returned 1 [0266.336] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwcompat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.351] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0266.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0266.352] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.352] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0266.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0266.353] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.353] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0266.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0266.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.354] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1daf, lpOverlapped=0x0) returned 1 [0266.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe251, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1db0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1db0, lpOverlapped=0x0) returned 1 [0266.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.364] CloseHandle (hObject=0x1f0) returned 1 [0266.364] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.364] SetEndOfFile (hFile=0x1e0) returned 1 [0266.364] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwcompat.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwcompat.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwcompat.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwcompat.txt.vhd")) returned 1 [0266.365] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39dcc9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39dcc9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x90d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hwexclude.txt", cAlternateFileName="HWEXCL~1.TXT")) returned 1 [0266.365] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwexclude.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.379] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984d0 [0266.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984d0 | out: hHeap=0x2750000) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.379] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.379] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92db8 [0266.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.380] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0266.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0266.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92db8 | out: hHeap=0x2750000) returned 1 [0266.381] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.381] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x90d, lpOverlapped=0x0) returned 1 [0266.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6f3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x910, lpOverlapped=0x0) returned 1 [0266.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.382] CloseHandle (hObject=0x1f0) returned 1 [0266.383] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.383] SetEndOfFile (hFile=0x1e0) returned 1 [0266.383] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwexclude.txt" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwexclude.txt"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\hwexclude.txt.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\hwexclude.txt.vhd")) returned 1 [0266.384] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39eff9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39eff9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x26b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.cat", cAlternateFileName="")) returned 1 [0266.384] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.394] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0266.394] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.394] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0266.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.395] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0266.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0266.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0266.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0266.396] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6b6, lpOverlapped=0x0) returned 1 [0266.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff94a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6c0, lpOverlapped=0x0) returned 1 [0266.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.399] CloseHandle (hObject=0x1f0) returned 1 [0266.399] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.399] SetEndOfFile (hFile=0x1e0) returned 1 [0266.401] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.cat" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.cat"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.cat.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.cat.vhd")) returned 1 [0266.401] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a3e27, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a3e27, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nxquery.inf", cAlternateFileName="")) returned 1 [0266.402] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.407] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.408] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757330 | out: hHeap=0x2750000) returned 1 [0266.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.412] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985e0 [0266.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.412] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985e0 | out: hHeap=0x2750000) returned 1 [0266.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.413] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0266.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.413] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0266.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.413] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0266.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0266.414] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.414] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5d7, lpOverlapped=0x0) returned 1 [0266.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa29, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x5e0, lpOverlapped=0x0) returned 1 [0266.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.416] CloseHandle (hObject=0x1f0) returned 1 [0266.416] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.416] SetEndOfFile (hFile=0x1e0) returned 1 [0266.417] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.inf" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.inf"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\nxquery.inf.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.inf.vhd")) returned 1 [0266.418] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a652e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a652e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 1 [0266.418] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.419] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98930 [0266.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98aa8 [0266.432] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.432] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.432] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c10 [0266.432] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984f0 [0266.432] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.432] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c10 | out: hHeap=0x2750000) returned 1 [0266.433] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984f0 | out: hHeap=0x2750000) returned 1 [0266.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.433] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.433] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0266.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98aa8 [0266.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0266.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.434] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0266.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0266.435] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98aa8 [0266.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98aa8 | out: hHeap=0x2750000) returned 1 [0266.435] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98930 | out: hHeap=0x2750000) returned 1 [0266.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.438] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10b0, lpOverlapped=0x0) returned 1 [0266.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef50, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10b0, lpOverlapped=0x0) returned 1 [0266.439] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.440] CloseHandle (hObject=0x1f0) returned 1 [0266.440] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.440] SetEndOfFile (hFile=0x1e0) returned 1 [0266.440] MoveFileW (lpExistingFileName="C:\\Windows10Upgrade\\resources\\amd64\\NXQuery.sys" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.sys"), lpNewFileName="C:\\Windows10Upgrade\\resources\\amd64\\NXQuery.sys.vhd" (normalized: "c:\\windows10upgrade\\resources\\amd64\\nxquery.sys.vhd")) returned 1 [0266.446] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a652e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a652e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NXQuery.sys", cAlternateFileName="")) returned 0 [0266.446] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0266.447] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba388 [0266.449] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.449] FindNextFileW (in: hFindFile=0xbba388, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.450] FindClose (in: hFindFile=0xbba388 | out: hFindFile=0xbba388) returned 1 [0266.450] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0266.450] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.450] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.450] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0266.451] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0266.451] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.451] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.451] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0266.451] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0266.452] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.452] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.452] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0266.452] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0266.453] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.453] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.453] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0266.453] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0266.454] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.454] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.454] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0266.455] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0266.455] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.455] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.455] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0266.456] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0266.457] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.457] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0266.458] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0266.458] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0266.458] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0266.458] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0266.459] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0266.460] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.460] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.460] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0266.460] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0266.461] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.461] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0266.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc985d0 [0266.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3e) returned 0xc98930 [0266.461] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0266.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc984f0 [0266.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x42) returned 0xc92db8 [0266.462] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0266.462] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0266.463] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0266.466] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0266.466] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0266.467] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0266.468] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0266.468] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.468] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0266.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98540 [0266.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757330 [0266.468] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 0 [0266.468] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0266.469] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8ed87bb, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ed87bb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0266.469] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8ed87bb, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ed87bb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.469] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6348b0, ftCreationTime.dwHighDateTime=0x1d5e948, ftLastAccessTime.dwLowDateTime=0x7bdf63f0, ftLastAccessTime.dwHighDateTime=0x1d5eb01, ftLastWriteTime.dwLowDateTime=0x7bdf63f0, ftLastWriteTime.dwHighDateTime=0x1d5eb01, nFileSizeHigh=0x0, nFileSizeLow=0xb629, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6pif.mp4", cAlternateFileName="")) returned 1 [0266.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\6pif.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\6pif.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0266.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.482] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0266.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.482] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.482] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0266.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0266.482] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.483] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0266.484] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0266.484] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.484] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.484] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1629, lpOverlapped=0x0) returned 1 [0266.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe9d7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1630, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1630, lpOverlapped=0x0) returned 1 [0266.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.488] CloseHandle (hObject=0x1f0) returned 1 [0266.488] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.489] SetEndOfFile (hFile=0x1e0) returned 1 [0266.490] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\6pif.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\6pif.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\6pif.mp4.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\6pif.mp4.vhd")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d7b3530, ftCreationTime.dwHighDateTime=0x1d5e47b, ftLastAccessTime.dwLowDateTime=0xd37b4cc0, ftLastAccessTime.dwHighDateTime=0x1d5e311, ftLastWriteTime.dwLowDateTime=0xd37b4cc0, ftLastWriteTime.dwHighDateTime=0x1d5e311, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O9HeNfqbX3", cAlternateFileName="O9HENF~1")) returned 1 [0266.491] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98590 [0266.491] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x44) returned 0xc92d18 [0266.491] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05ee450, ftCreationTime.dwHighDateTime=0x1d5e43f, ftLastAccessTime.dwLowDateTime=0x1f5df8c0, ftLastAccessTime.dwHighDateTime=0x1d5e5f8, ftLastWriteTime.dwLowDateTime=0x1f5df8c0, ftLastWriteTime.dwHighDateTime=0x1d5e5f8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sMYkfTm2skX.avi", cAlternateFileName="SMYKFT~1.AVI")) returned 1 [0266.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\sMYkfTm2skX.avi" (normalized: "c:\\users\\fd1hvy\\videos\\smykftm2skx.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.516] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.517] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0266.517] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.517] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0266.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.518] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0266.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0266.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.519] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0266.519] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0266.519] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.520] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.520] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1d8e, lpOverlapped=0x0) returned 1 [0266.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe272, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d90, lpOverlapped=0x0) returned 1 [0266.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.523] CloseHandle (hObject=0x1f0) returned 1 [0266.523] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.523] SetEndOfFile (hFile=0x1e0) returned 1 [0266.539] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\sMYkfTm2skX.avi" (normalized: "c:\\users\\fd1hvy\\videos\\smykftm2skx.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\sMYkfTm2skX.avi.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\smykftm2skx.avi.vhd")) returned 1 [0266.540] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b0fa930, ftCreationTime.dwHighDateTime=0x1d5ebca, ftLastAccessTime.dwLowDateTime=0x29c3eab0, ftLastAccessTime.dwHighDateTime=0x1d5ea01, ftLastWriteTime.dwLowDateTime=0x29c3eab0, ftLastWriteTime.dwHighDateTime=0x1d5ea01, nFileSizeHigh=0x0, nFileSizeLow=0x7b10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TVzXSxp0182JW.swf", cAlternateFileName="TVZXSX~1.SWF")) returned 1 [0266.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\TVzXSxp0182JW.swf" (normalized: "c:\\users\\fd1hvy\\videos\\tvzxsxp0182jw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.552] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.552] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.552] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.552] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.552] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98640 [0266.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98640 | out: hHeap=0x2750000) returned 1 [0266.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.553] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0266.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0266.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.554] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0266.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0266.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.555] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1b10, lpOverlapped=0x0) returned 1 [0266.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe4f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1b10, lpOverlapped=0x0) returned 1 [0266.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.562] CloseHandle (hObject=0x1f0) returned 1 [0266.562] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.562] SetEndOfFile (hFile=0x1e0) returned 1 [0266.570] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\TVzXSxp0182JW.swf" (normalized: "c:\\users\\fd1hvy\\videos\\tvzxsxp0182jw.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\TVzXSxp0182JW.swf.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\tvzxsxp0182jw.swf.vhd")) returned 1 [0266.571] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa749cb0, ftCreationTime.dwHighDateTime=0x1d5e941, ftLastAccessTime.dwLowDateTime=0x35f6ecd0, ftLastAccessTime.dwHighDateTime=0x1d5e388, ftLastWriteTime.dwLowDateTime=0x35f6ecd0, ftLastWriteTime.dwHighDateTime=0x1d5e388, nFileSizeHigh=0x0, nFileSizeLow=0x75ea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yQrZrexhKC0.mkv", cAlternateFileName="YQRZRE~1.MKV")) returned 1 [0266.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\yQrZrexhKC0.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\yqrzrexhkc0.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.572] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98640 [0266.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98640 | out: hHeap=0x2750000) returned 1 [0266.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.583] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0266.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.583] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0266.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0266.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0266.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15ea, lpOverlapped=0x0) returned 1 [0266.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea16, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15f0, lpOverlapped=0x0) returned 1 [0266.594] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.594] CloseHandle (hObject=0x1f0) returned 1 [0266.594] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.594] SetEndOfFile (hFile=0x1e0) returned 1 [0266.595] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\yQrZrexhKC0.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\yqrzrexhkc0.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\yQrZrexhKC0.mkv.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\yqrzrexhkc0.mkv.vhd")) returned 1 [0266.596] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f50ad90, ftCreationTime.dwHighDateTime=0x1d5eb35, ftLastAccessTime.dwLowDateTime=0x2c44c50, ftLastAccessTime.dwHighDateTime=0x1d5ef0d, ftLastWriteTime.dwLowDateTime=0x2c44c50, ftLastWriteTime.dwHighDateTime=0x1d5ef0d, nFileSizeHigh=0x0, nFileSizeLow=0x14dc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_iyMhw.mp4", cAlternateFileName="")) returned 1 [0266.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\_iyMhw.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\_iymhw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.610] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.610] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.610] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.610] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0266.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0266.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.611] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.611] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.611] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0266.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.612] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0266.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.612] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0266.613] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0266.613] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.613] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.613] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.614] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.616] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.616] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.622] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.622] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdc8, lpOverlapped=0x0) returned 1 [0266.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff238, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xdd0, lpOverlapped=0x0) returned 1 [0266.623] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.624] CloseHandle (hObject=0x1f0) returned 1 [0266.624] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.624] SetEndOfFile (hFile=0x1e0) returned 1 [0266.626] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\_iyMhw.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\_iymhw.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\_iyMhw.mp4.vhd" (normalized: "c:\\users\\fd1hvy\\videos\\_iymhw.mp4.vhd")) returned 1 [0266.627] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f50ad90, ftCreationTime.dwHighDateTime=0x1d5eb35, ftLastAccessTime.dwLowDateTime=0x2c44c50, ftLastAccessTime.dwHighDateTime=0x1d5ef0d, ftLastWriteTime.dwLowDateTime=0x2c44c50, ftLastWriteTime.dwHighDateTime=0x1d5ef0d, nFileSizeHigh=0x0, nFileSizeLow=0x14dc8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_iyMhw.mp4", cAlternateFileName="")) returned 0 [0266.627] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0266.627] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0266.628] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.628] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0266.628] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0266.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0266.629] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0266.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0266.630] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0266.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0266.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.830] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0266.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0266.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0266.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x357, lpOverlapped=0x0) returned 1 [0266.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffca9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x360, lpOverlapped=0x0) returned 1 [0266.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.832] CloseHandle (hObject=0x1f0) returned 1 [0266.832] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.832] SetEndOfFile (hFile=0x1e0) returned 1 [0266.833] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms"), lpNewFileName="C:\\Users\\FD1HVy\\Searches\\winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.vhd" (normalized: "c:\\users\\fd1hvy\\searches\\winrt--{s-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms.vhd")) returned 1 [0266.833] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 0 [0266.834] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0266.834] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0266.834] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.834] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0266.834] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0266.834] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0266.834] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8f4af3d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8f4af3d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0266.834] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8f4af3d, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8f4af3d, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.834] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9398120, ftCreationTime.dwHighDateTime=0x1d5e0dc, ftLastAccessTime.dwLowDateTime=0xace904e0, ftLastAccessTime.dwHighDateTime=0x1d5ea3b, ftLastWriteTime.dwLowDateTime=0xace904e0, ftLastWriteTime.dwHighDateTime=0x1d5ea3b, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4hnv7saRT 7w.jpg", cAlternateFileName="4HNV7S~1.JPG")) returned 1 [0266.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4hnv7saRT 7w.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\4hnv7sart 7w.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98640 [0266.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98640 | out: hHeap=0x2750000) returned 1 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.844] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.844] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0266.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0266.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0266.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0266.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0266.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0266.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x139f, lpOverlapped=0x0) returned 1 [0266.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec61, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x13a0, lpOverlapped=0x0) returned 1 [0266.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.851] CloseHandle (hObject=0x1f0) returned 1 [0266.851] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.851] SetEndOfFile (hFile=0x1e0) returned 1 [0266.852] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\4hnv7saRT 7w.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\4hnv7sart 7w.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\4hnv7saRT 7w.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\4hnv7sart 7w.jpg.vhd")) returned 1 [0266.853] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf589aa90, ftCreationTime.dwHighDateTime=0x1d5e434, ftLastAccessTime.dwLowDateTime=0x14e27cc0, ftLastAccessTime.dwHighDateTime=0x1d5e541, ftLastWriteTime.dwLowDateTime=0x14e27cc0, ftLastWriteTime.dwHighDateTime=0x1d5e541, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8h7FAFRLd.bmp", cAlternateFileName="8H7FAF~1.BMP")) returned 1 [0266.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8h7FAFRLd.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\8h7fafrld.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.862] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.862] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.862] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.862] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.862] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.862] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98580 [0266.862] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.862] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.863] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98580 | out: hHeap=0x2750000) returned 1 [0266.863] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.863] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.863] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.863] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0266.863] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.863] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0266.863] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.863] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0266.864] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0266.864] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.864] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.864] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0266.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x131e, lpOverlapped=0x0) returned 1 [0266.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffece2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1320, lpOverlapped=0x0) returned 1 [0266.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0266.865] CloseHandle (hObject=0x1f0) returned 1 [0266.865] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0266.865] SetEndOfFile (hFile=0x1e0) returned 1 [0266.866] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\8h7FAFRLd.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\8h7fafrld.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\8h7FAFRLd.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\8h7fafrld.bmp.vhd")) returned 1 [0266.866] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5180ff40, ftCreationTime.dwHighDateTime=0x1d5e38d, ftLastAccessTime.dwLowDateTime=0x26dbd50, ftLastAccessTime.dwHighDateTime=0x1d5e7b9, ftLastWriteTime.dwLowDateTime=0x26dbd50, ftLastWriteTime.dwHighDateTime=0x1d5e7b9, nFileSizeHigh=0x0, nFileSizeLow=0x4eda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CaBALDyLUrQxmnjf.gif", cAlternateFileName="CABALD~1.GIF")) returned 1 [0266.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\CaBALDyLUrQxmnjf.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\cabaldylurqxmnjf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0266.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0266.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.870] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757388 [0266.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757388 | out: hHeap=0x2750000) returned 1 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98600 [0266.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0266.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98600 | out: hHeap=0x2750000) returned 1 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0266.874] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.874] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0266.874] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0266.875] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0266.875] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0267.060] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0267.060] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.134] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xeda, lpOverlapped=0x0) returned 1 [0267.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff126, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xee0, lpOverlapped=0x0) returned 1 [0267.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.259] CloseHandle (hObject=0x1f0) returned 1 [0267.260] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.260] SetEndOfFile (hFile=0x1e0) returned 1 [0267.289] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\CaBALDyLUrQxmnjf.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\cabaldylurqxmnjf.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\CaBALDyLUrQxmnjf.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\cabaldylurqxmnjf.gif.vhd")) returned 1 [0267.311] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0267.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc985e0 [0267.312] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0x2757388 [0267.312] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77a68e0, ftCreationTime.dwHighDateTime=0x1d5e963, ftLastAccessTime.dwLowDateTime=0x15f62570, ftLastAccessTime.dwHighDateTime=0x1d5f05f, ftLastWriteTime.dwLowDateTime=0x15f62570, ftLastWriteTime.dwHighDateTime=0x1d5f05f, nFileSizeHigh=0x0, nFileSizeLow=0x13fc7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CAR6ZGa74hYkkzb0n.gif", cAlternateFileName="CAR6ZG~1.GIF")) returned 1 [0267.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\CAR6ZGa74hYkkzb0n.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\car6zga74hykkzb0n.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.319] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0267.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0267.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.320] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0267.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0267.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0267.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0267.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.321] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.325] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1fc7, lpOverlapped=0x0) returned 1 [0267.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe039, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1fd0, lpOverlapped=0x0) returned 1 [0267.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.326] CloseHandle (hObject=0x1f0) returned 1 [0267.326] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.326] SetEndOfFile (hFile=0x1e0) returned 1 [0267.327] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\CAR6ZGa74hYkkzb0n.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\car6zga74hykkzb0n.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\CAR6ZGa74hYkkzb0n.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\car6zga74hykkzb0n.gif.vhd")) returned 1 [0267.328] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.328] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d885940, ftCreationTime.dwHighDateTime=0x1d5e2e8, ftLastAccessTime.dwLowDateTime=0xc823e730, ftLastAccessTime.dwHighDateTime=0x1d5eb43, ftLastWriteTime.dwLowDateTime=0xc823e730, ftLastWriteTime.dwHighDateTime=0x1d5eb43, nFileSizeHigh=0x0, nFileSizeLow=0x7a89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dS2eo.bmp", cAlternateFileName="")) returned 1 [0267.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\dS2eo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ds2eo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98640 [0267.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98640 | out: hHeap=0x2750000) returned 1 [0267.369] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.370] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0267.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0267.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0267.371] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0267.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.371] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.371] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1a89, lpOverlapped=0x0) returned 1 [0267.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe577, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1a90, lpOverlapped=0x0) returned 1 [0267.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.373] CloseHandle (hObject=0x1f0) returned 1 [0267.373] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.373] SetEndOfFile (hFile=0x1e0) returned 1 [0267.374] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\dS2eo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ds2eo.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\dS2eo.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\ds2eo.bmp.vhd")) returned 1 [0267.376] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919587d0, ftCreationTime.dwHighDateTime=0x1d5e5cd, ftLastAccessTime.dwLowDateTime=0x74f04e10, ftLastAccessTime.dwHighDateTime=0x1d5e42b, ftLastWriteTime.dwLowDateTime=0x74f04e10, ftLastWriteTime.dwHighDateTime=0x1d5e42b, nFileSizeHigh=0x0, nFileSizeLow=0xf4ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eM2DFRoz4Rm4cHF.png", cAlternateFileName="EM2DFR~1.PNG")) returned 1 [0267.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eM2DFRoz4Rm4cHF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\em2dfroz4rm4chf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.384] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0267.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0267.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.385] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0267.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0267.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0267.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0267.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.391] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x14ef, lpOverlapped=0x0) returned 1 [0267.391] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb11, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x14f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x14f0, lpOverlapped=0x0) returned 1 [0267.392] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.392] CloseHandle (hObject=0x1f0) returned 1 [0267.393] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.393] SetEndOfFile (hFile=0x1e0) returned 1 [0267.394] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\eM2DFRoz4Rm4cHF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\em2dfroz4rm4chf.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\eM2DFRoz4Rm4cHF.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\em2dfroz4rm4chf.png.vhd")) returned 1 [0267.395] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9a6ae70, ftCreationTime.dwHighDateTime=0x1d5e4c0, ftLastAccessTime.dwLowDateTime=0x19b26b0, ftLastAccessTime.dwHighDateTime=0x1d5ec7d, ftLastWriteTime.dwLowDateTime=0x19b26b0, ftLastWriteTime.dwHighDateTime=0x1d5ec7d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F1ZIV7t", cAlternateFileName="")) returned 1 [0267.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98640 [0267.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x42) returned 0xc92ae8 [0267.395] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e692050, ftCreationTime.dwHighDateTime=0x1d5e702, ftLastAccessTime.dwLowDateTime=0x6507990, ftLastAccessTime.dwHighDateTime=0x1d5e4f7, ftLastWriteTime.dwLowDateTime=0x6507990, ftLastWriteTime.dwHighDateTime=0x1d5e4f7, nFileSizeHigh=0x0, nFileSizeLow=0x138d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fXDaSvW72 ZG.gif", cAlternateFileName="FXDASV~1.GIF")) returned 1 [0267.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\fXDaSvW72 ZG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\fxdasvw72 zg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.396] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.396] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.407] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.407] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.407] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.408] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.408] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.408] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0267.408] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.408] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.408] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0267.408] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.408] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.409] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.409] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0267.409] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.409] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0267.409] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.409] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0267.410] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0267.410] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.410] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.410] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18d4, lpOverlapped=0x0) returned 1 [0267.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe72c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18e0, lpOverlapped=0x0) returned 1 [0267.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.417] CloseHandle (hObject=0x1f0) returned 1 [0267.418] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.418] SetEndOfFile (hFile=0x1e0) returned 1 [0267.419] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\fXDaSvW72 ZG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\fxdasvw72 zg.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\fXDaSvW72 ZG.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\fxdasvw72 zg.gif.vhd")) returned 1 [0267.420] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3579650, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x5ce01f0, ftLastAccessTime.dwHighDateTime=0x1d5e74e, ftLastWriteTime.dwLowDateTime=0x5ce01f0, ftLastWriteTime.dwHighDateTime=0x1d5e74e, nFileSizeHigh=0x0, nFileSizeLow=0xc81b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="h5Ac2oe.bmp", cAlternateFileName="")) returned 1 [0267.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\h5Ac2oe.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\h5ac2oe.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0267.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0267.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.428] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0267.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0267.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0267.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0267.430] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.436] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x81b, lpOverlapped=0x0) returned 1 [0267.436] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff7e5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x820, lpOverlapped=0x0) returned 1 [0267.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.437] CloseHandle (hObject=0x1f0) returned 1 [0267.437] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.438] SetEndOfFile (hFile=0x1e0) returned 1 [0267.439] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\h5Ac2oe.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\h5ac2oe.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\h5Ac2oe.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\h5ac2oe.bmp.vhd")) returned 1 [0267.440] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99f2a00, ftCreationTime.dwHighDateTime=0x1d5e9c6, ftLastAccessTime.dwLowDateTime=0x59019760, ftLastAccessTime.dwHighDateTime=0x1d5efa0, ftLastWriteTime.dwLowDateTime=0x59019760, ftLastWriteTime.dwHighDateTime=0x1d5efa0, nFileSizeHigh=0x0, nFileSizeLow=0x16515, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KPssazJe5wGXejDtYDbg.gif", cAlternateFileName="KPSSAZ~1.GIF")) returned 1 [0267.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\KPssazJe5wGXejDtYDbg.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\kpssazje5wgxejdtydbg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.441] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0267.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0267.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.452] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0267.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0267.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0267.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0267.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x515, lpOverlapped=0x0) returned 1 [0267.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffaeb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x520, lpOverlapped=0x0) returned 1 [0267.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.464] CloseHandle (hObject=0x1f0) returned 1 [0267.464] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.464] SetEndOfFile (hFile=0x1e0) returned 1 [0267.465] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\KPssazJe5wGXejDtYDbg.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\kpssazje5wgxejdtydbg.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\KPssazJe5wGXejDtYDbg.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\kpssazje5wgxejdtydbg.gif.vhd")) returned 1 [0267.466] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b96ce90, ftCreationTime.dwHighDateTime=0x1d5e0dc, ftLastAccessTime.dwLowDateTime=0x45eff20, ftLastAccessTime.dwHighDateTime=0x1d5e8ef, ftLastWriteTime.dwLowDateTime=0x45eff20, ftLastWriteTime.dwHighDateTime=0x1d5e8ef, nFileSizeHigh=0x0, nFileSizeLow=0x10df3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m_40eubD1Ig4sOC.gif", cAlternateFileName="M_40EU~1.GIF")) returned 1 [0267.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\m_40eubD1Ig4sOC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\m_40eubd1ig4soc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.476] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.476] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98510 [0267.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98510 | out: hHeap=0x2750000) returned 1 [0267.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.477] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0267.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.477] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0267.477] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.478] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0267.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0267.479] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.479] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xdf3, lpOverlapped=0x0) returned 1 [0267.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff20d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe00, lpOverlapped=0x0) returned 1 [0267.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.484] CloseHandle (hObject=0x1f0) returned 1 [0267.484] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.484] SetEndOfFile (hFile=0x1e0) returned 1 [0267.527] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\m_40eubD1Ig4sOC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\m_40eubd1ig4soc.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\m_40eubD1Ig4sOC.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\m_40eubd1ig4soc.gif.vhd")) returned 1 [0267.528] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23c9420, ftCreationTime.dwHighDateTime=0x1d5e595, ftLastAccessTime.dwLowDateTime=0x39074db0, ftLastAccessTime.dwHighDateTime=0x1d5e262, ftLastWriteTime.dwLowDateTime=0x39074db0, ftLastWriteTime.dwHighDateTime=0x1d5e262, nFileSizeHigh=0x0, nFileSizeLow=0xd3de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N7ZSx-_.png", cAlternateFileName="")) returned 1 [0267.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\N7ZSx-_.png" (normalized: "c:\\users\\fd1hvy\\pictures\\n7zsx-_.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.555] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98650 [0267.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98650 | out: hHeap=0x2750000) returned 1 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.556] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0267.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0267.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0267.558] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x13de, lpOverlapped=0x0) returned 1 [0267.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec22, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x13e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x13e0, lpOverlapped=0x0) returned 1 [0267.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.564] CloseHandle (hObject=0x1f0) returned 1 [0267.564] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.564] SetEndOfFile (hFile=0x1e0) returned 1 [0267.582] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\N7ZSx-_.png" (normalized: "c:\\users\\fd1hvy\\pictures\\n7zsx-_.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\N7ZSx-_.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\n7zsx-_.png.vhd")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30376ea0, ftCreationTime.dwHighDateTime=0x1d5ed0b, ftLastAccessTime.dwLowDateTime=0xbbc3d00, ftLastAccessTime.dwHighDateTime=0x1d5eefd, ftLastWriteTime.dwLowDateTime=0xbbc3d00, ftLastWriteTime.dwHighDateTime=0x1d5eefd, nFileSizeHigh=0x0, nFileSizeLow=0xcb55, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="plVO6lPiWn.gif", cAlternateFileName="PLVO6L~1.GIF")) returned 1 [0267.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\plVO6lPiWn.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\plvo6lpiwn.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.591] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98510 [0267.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.591] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.592] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98510 | out: hHeap=0x2750000) returned 1 [0267.592] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.592] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.592] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.592] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0267.592] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.592] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0267.593] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.593] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0267.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0267.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.598] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.599] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.600] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.601] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.602] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xb55, lpOverlapped=0x0) returned 1 [0267.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff4ab, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb60, lpOverlapped=0x0) returned 1 [0267.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.604] CloseHandle (hObject=0x1f0) returned 1 [0267.604] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.604] SetEndOfFile (hFile=0x1e0) returned 1 [0267.619] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\plVO6lPiWn.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\plvo6lpiwn.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\plVO6lPiWn.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\plvo6lpiwn.gif.vhd")) returned 1 [0267.620] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd33e00, ftCreationTime.dwHighDateTime=0x1d5e24f, ftLastAccessTime.dwLowDateTime=0xc3558780, ftLastAccessTime.dwHighDateTime=0x1d5f02b, ftLastWriteTime.dwLowDateTime=0xc3558780, ftLastWriteTime.dwHighDateTime=0x1d5f02b, nFileSizeHigh=0x0, nFileSizeLow=0x17d16, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QsJhhF6UHM Vs7SC91JR.png", cAlternateFileName="QSJHHF~1.PNG")) returned 1 [0267.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\QsJhhF6UHM Vs7SC91JR.png" (normalized: "c:\\users\\fd1hvy\\pictures\\qsjhhf6uhm vs7sc91jr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757490 | out: hHeap=0x2750000) returned 1 [0267.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98c58 [0267.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985a0 [0267.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c58 | out: hHeap=0x2750000) returned 1 [0267.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985a0 | out: hHeap=0x2750000) returned 1 [0267.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.631] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0267.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc98af0 [0267.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0267.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0267.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0267.632] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.634] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.635] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.636] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.637] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.638] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.638] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.639] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.639] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.640] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1d16, lpOverlapped=0x0) returned 1 [0267.640] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe2ea, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d20, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d20, lpOverlapped=0x0) returned 1 [0267.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.641] CloseHandle (hObject=0x1f0) returned 1 [0267.641] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.641] SetEndOfFile (hFile=0x1e0) returned 1 [0267.652] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\QsJhhF6UHM Vs7SC91JR.png" (normalized: "c:\\users\\fd1hvy\\pictures\\qsjhhf6uhm vs7sc91jr.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\QsJhhF6UHM Vs7SC91JR.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\qsjhhf6uhm vs7sc91jr.png.vhd")) returned 1 [0267.653] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0267.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc985b0 [0267.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0x2757490 [0267.654] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82c980, ftCreationTime.dwHighDateTime=0x1d5ef1d, ftLastAccessTime.dwLowDateTime=0x28db25a0, ftLastAccessTime.dwHighDateTime=0x1d5eca4, ftLastWriteTime.dwLowDateTime=0x28db25a0, ftLastWriteTime.dwHighDateTime=0x1d5eca4, nFileSizeHigh=0x0, nFileSizeLow=0x194e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S_XSvK.gif", cAlternateFileName="")) returned 1 [0267.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\S_XSvK.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\s_xsvk.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.664] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.664] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.664] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc990a8 [0267.664] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc990a8 | out: hHeap=0x2750000) returned 1 [0267.664] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.664] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98680 [0267.664] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.664] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.665] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98680 | out: hHeap=0x2750000) returned 1 [0267.665] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.665] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.665] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.665] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0267.665] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.665] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0267.665] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.665] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0267.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0267.667] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.667] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x194e, lpOverlapped=0x0) returned 1 [0267.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe6b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1950, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1950, lpOverlapped=0x0) returned 1 [0267.668] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.668] CloseHandle (hObject=0x1f0) returned 1 [0267.668] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.668] SetEndOfFile (hFile=0x1e0) returned 1 [0267.670] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\S_XSvK.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\s_xsvk.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\S_XSvK.gif.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\s_xsvk.gif.vhd")) returned 1 [0267.670] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9078bf90, ftCreationTime.dwHighDateTime=0x1d5ee04, ftLastAccessTime.dwLowDateTime=0xe76a8dc0, ftLastAccessTime.dwHighDateTime=0x1d5e4f8, ftLastWriteTime.dwLowDateTime=0xe76a8dc0, ftLastWriteTime.dwHighDateTime=0x1d5e4f8, nFileSizeHigh=0x0, nFileSizeLow=0xa406, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vmctYU_8m.png", cAlternateFileName="VMCTYU~1.PNG")) returned 1 [0267.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\vmctYU_8m.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vmctyu_8m.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc998e8 [0267.679] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc998e8 | out: hHeap=0x2750000) returned 1 [0267.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.679] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0267.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0267.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.680] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0267.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.680] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0267.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.680] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0267.682] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0267.682] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.682] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.682] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x406, lpOverlapped=0x0) returned 1 [0267.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffbfa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x410, lpOverlapped=0x0) returned 1 [0267.685] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.686] CloseHandle (hObject=0x1f0) returned 1 [0267.686] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.686] SetEndOfFile (hFile=0x1e0) returned 1 [0267.691] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\vmctYU_8m.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vmctyu_8m.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\vmctYU_8m.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\vmctyu_8m.png.vhd")) returned 1 [0267.692] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b0b390, ftCreationTime.dwHighDateTime=0x1d5e199, ftLastAccessTime.dwLowDateTime=0xb21644d0, ftLastAccessTime.dwHighDateTime=0x1d5ed53, ftLastWriteTime.dwLowDateTime=0xb21644d0, ftLastWriteTime.dwHighDateTime=0x1d5ed53, nFileSizeHigh=0x0, nFileSizeLow=0x14c57, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WB886g8ffvh5jBv.jpg", cAlternateFileName="WB886G~1.JPG")) returned 1 [0267.692] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\WB886g8ffvh5jBv.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\wb886g8ffvh5jbv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.698] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0267.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985a0 [0267.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985a0 | out: hHeap=0x2750000) returned 1 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.699] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0267.700] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.700] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0267.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0267.701] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc57, lpOverlapped=0x0) returned 1 [0267.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff3a9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc60, lpOverlapped=0x0) returned 1 [0267.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.710] CloseHandle (hObject=0x1f0) returned 1 [0267.710] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.710] SetEndOfFile (hFile=0x1e0) returned 1 [0267.711] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\WB886g8ffvh5jBv.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\wb886g8ffvh5jbv.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\WB886g8ffvh5jBv.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\wb886g8ffvh5jbv.jpg.vhd")) returned 1 [0267.712] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc67c470, ftCreationTime.dwHighDateTime=0x1d5e28e, ftLastAccessTime.dwLowDateTime=0xebc5fdf0, ftLastAccessTime.dwHighDateTime=0x1d5eab1, ftLastWriteTime.dwLowDateTime=0xebc5fdf0, ftLastWriteTime.dwHighDateTime=0x1d5eab1, nFileSizeHigh=0x0, nFileSizeLow=0x9be5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XX4NDU35kG.jpg", cAlternateFileName="XX4NDU~1.JPG")) returned 1 [0267.712] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\XX4NDU35kG.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\xx4ndu35kg.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.714] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.715] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.716] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.722] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.722] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.722] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0267.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0267.722] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.722] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0267.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0267.722] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.722] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.723] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0267.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0267.723] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.723] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0267.724] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0267.724] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.724] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.724] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1be5, lpOverlapped=0x0) returned 1 [0267.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe41b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1bf0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1bf0, lpOverlapped=0x0) returned 1 [0267.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.729] CloseHandle (hObject=0x1f0) returned 1 [0267.729] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.729] SetEndOfFile (hFile=0x1e0) returned 1 [0267.731] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\XX4NDU35kG.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\xx4ndu35kg.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\XX4NDU35kG.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\xx4ndu35kg.jpg.vhd")) returned 1 [0267.732] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf7bc030, ftCreationTime.dwHighDateTime=0x1d5e1e2, ftLastAccessTime.dwLowDateTime=0x30e21040, ftLastAccessTime.dwHighDateTime=0x1d5e85a, ftLastWriteTime.dwLowDateTime=0x30e21040, ftLastWriteTime.dwHighDateTime=0x1d5e85a, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YGTelf6nNsZiTla85.bmp", cAlternateFileName="YGTELF~1.BMP")) returned 1 [0267.732] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\YGTelf6nNsZiTla85.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ygtelf6nnszitla85.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.739] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.740] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.741] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.742] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.742] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99ba8 [0267.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99ba8 | out: hHeap=0x2750000) returned 1 [0267.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0267.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0267.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.743] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0267.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.743] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0267.743] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.744] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0267.745] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0267.745] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.745] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.745] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4aa, lpOverlapped=0x0) returned 1 [0267.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4b0, lpOverlapped=0x0) returned 1 [0267.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.746] CloseHandle (hObject=0x1f0) returned 1 [0267.746] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.746] SetEndOfFile (hFile=0x1e0) returned 1 [0267.748] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\YGTelf6nNsZiTla85.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ygtelf6nnszitla85.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\YGTelf6nNsZiTla85.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\ygtelf6nnszitla85.bmp.vhd")) returned 1 [0267.748] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1924aa60, ftCreationTime.dwHighDateTime=0x1d5e52d, ftLastAccessTime.dwLowDateTime=0xc9f437d0, ftLastAccessTime.dwHighDateTime=0x1d5e126, ftLastWriteTime.dwLowDateTime=0xc9f437d0, ftLastWriteTime.dwHighDateTime=0x1d5e126, nFileSizeHigh=0x0, nFileSizeLow=0x5ca7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXs7yIVeiadRN1SL3R.png", cAlternateFileName="ZXS7YI~1.PNG")) returned 1 [0267.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\zXs7yIVeiadRN1SL3R.png" (normalized: "c:\\users\\fd1hvy\\pictures\\zxs7yiveiadrn1sl3r.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99730 [0267.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99730 | out: hHeap=0x2750000) returned 1 [0267.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98510 [0267.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98510 | out: hHeap=0x2750000) returned 1 [0267.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.757] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0267.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0267.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0267.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0267.758] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.759] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.759] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ca7, lpOverlapped=0x0) returned 1 [0267.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe359, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.760] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1cb0, lpOverlapped=0x0) returned 1 [0267.761] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.761] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.761] CloseHandle (hObject=0x1f0) returned 1 [0267.761] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.761] SetEndOfFile (hFile=0x1e0) returned 1 [0267.780] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\zXs7yIVeiadRN1SL3R.png" (normalized: "c:\\users\\fd1hvy\\pictures\\zxs7yiveiadrn1sl3r.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\zXs7yIVeiadRN1SL3R.png.vhd" (normalized: "c:\\users\\fd1hvy\\pictures\\zxs7yiveiadrn1sl3r.png.vhd")) returned 1 [0267.808] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1924aa60, ftCreationTime.dwHighDateTime=0x1d5e52d, ftLastAccessTime.dwLowDateTime=0xc9f437d0, ftLastAccessTime.dwHighDateTime=0x1d5e126, ftLastWriteTime.dwLowDateTime=0xc9f437d0, ftLastWriteTime.dwHighDateTime=0x1d5e126, nFileSizeHigh=0x0, nFileSizeLow=0x5ca7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXs7yIVeiadRN1SL3R.png", cAlternateFileName="ZXS7YI~1.PNG")) returned 0 [0267.831] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0267.831] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0267.831] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.831] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.831] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.832] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0267.832] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8c03b77, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c03b77, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0267.832] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8c03b77, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c03b77, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.832] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0cd45b0, ftCreationTime.dwHighDateTime=0x1d5eac4, ftLastAccessTime.dwLowDateTime=0x9dc1d870, ftLastAccessTime.dwHighDateTime=0x1d5eab3, ftLastWriteTime.dwLowDateTime=0x9dc1d870, ftLastWriteTime.dwHighDateTime=0x1d5eab3, nFileSizeHigh=0x0, nFileSizeLow=0xd5be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C-cx.wav", cAlternateFileName="")) returned 1 [0267.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\C-cx.wav" (normalized: "c:\\users\\fd1hvy\\music\\c-cx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc992b8 [0267.889] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc992b8 | out: hHeap=0x2750000) returned 1 [0267.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984c0 [0267.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984c0 | out: hHeap=0x2750000) returned 1 [0267.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.890] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0267.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.891] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0267.891] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.891] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0267.892] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0267.892] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.892] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.892] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x15be, lpOverlapped=0x0) returned 1 [0267.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffea42, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x15c0, lpOverlapped=0x0) returned 1 [0267.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.963] CloseHandle (hObject=0x1f0) returned 1 [0267.963] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.963] SetEndOfFile (hFile=0x1e0) returned 1 [0267.965] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\C-cx.wav" (normalized: "c:\\users\\fd1hvy\\music\\c-cx.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\C-cx.wav.vhd" (normalized: "c:\\users\\fd1hvy\\music\\c-cx.wav.vhd")) returned 1 [0267.966] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436c570, ftCreationTime.dwHighDateTime=0x1d5eedb, ftLastAccessTime.dwLowDateTime=0x18266c60, ftLastAccessTime.dwHighDateTime=0x1d5e8df, ftLastWriteTime.dwLowDateTime=0x18266c60, ftLastWriteTime.dwHighDateTime=0x1d5e8df, nFileSizeHigh=0x0, nFileSizeLow=0x6b90, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="d5mRln.mp3", cAlternateFileName="")) returned 1 [0267.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\d5mRln.mp3" (normalized: "c:\\users\\fd1hvy\\music\\d5mrln.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.971] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.972] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99788 [0267.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99788 | out: hHeap=0x2750000) returned 1 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98600 [0267.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98600 | out: hHeap=0x2750000) returned 1 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.974] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0267.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.975] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0267.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0267.976] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.976] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xb90, lpOverlapped=0x0) returned 1 [0267.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff470, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb90, lpOverlapped=0x0) returned 1 [0267.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.978] CloseHandle (hObject=0x1f0) returned 1 [0267.979] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.979] SetEndOfFile (hFile=0x1e0) returned 1 [0267.980] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\d5mRln.mp3" (normalized: "c:\\users\\fd1hvy\\music\\d5mrln.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\d5mRln.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\music\\d5mrln.mp3.vhd")) returned 1 [0267.981] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.981] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee5f4710, ftCreationTime.dwHighDateTime=0x1d5e7eb, ftLastAccessTime.dwLowDateTime=0x1046a0, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x1046a0, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x1744d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="H2n7fh.mp3", cAlternateFileName="")) returned 1 [0267.981] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\H2n7fh.mp3" (normalized: "c:\\users\\fd1hvy\\music\\h2n7fh.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0267.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.987] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.988] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99628 [0267.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99628 | out: hHeap=0x2750000) returned 1 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0267.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.988] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0267.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0267.989] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0267.989] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0267.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0267.990] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0267.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0267.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0267.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0267.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0267.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x144d, lpOverlapped=0x0) returned 1 [0267.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffebb3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0267.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1450, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1450, lpOverlapped=0x0) returned 1 [0267.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0267.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0267.997] CloseHandle (hObject=0x1f0) returned 1 [0267.997] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0267.997] SetEndOfFile (hFile=0x1e0) returned 1 [0267.999] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\H2n7fh.mp3" (normalized: "c:\\users\\fd1hvy\\music\\h2n7fh.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\H2n7fh.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\music\\h2n7fh.mp3.vhd")) returned 1 [0268.000] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a1d550, ftCreationTime.dwHighDateTime=0x1d5ea9d, ftLastAccessTime.dwLowDateTime=0xea680ff0, ftLastAccessTime.dwHighDateTime=0x1d5ec43, ftLastWriteTime.dwLowDateTime=0xea680ff0, ftLastWriteTime.dwHighDateTime=0x1d5ec43, nFileSizeHigh=0x0, nFileSizeLow=0x1873a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kEKYPW9CqQfRJ2miyL-6.mp3", cAlternateFileName="KEKYPW~1.MP3")) returned 1 [0268.000] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\kEKYPW9CqQfRJ2miyL-6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\kekypw9cqqfrj2miyl-6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0268.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0268.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.005] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.006] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.007] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.008] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.009] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0268.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0268.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99aa0 [0268.011] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99aa0 | out: hHeap=0x2750000) returned 1 [0268.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0268.011] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98530 [0268.011] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0268.011] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0268.012] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98530 | out: hHeap=0x2750000) returned 1 [0268.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0268.012] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0268.012] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0268.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0268.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0268.012] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0268.012] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0268.013] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0268.014] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0268.014] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0268.014] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0268.014] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0268.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0268.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.015] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0268.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0268.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x73a, lpOverlapped=0x0) returned 1 [0268.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x740, lpOverlapped=0x0) returned 1 [0268.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0268.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0268.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0268.025] CloseHandle (hObject=0x1f0) returned 1 [0268.026] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0268.026] SetEndOfFile (hFile=0x1e0) returned 1 [0268.075] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\kEKYPW9CqQfRJ2miyL-6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\kekypw9cqqfrj2miyl-6.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\kEKYPW9CqQfRJ2miyL-6.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\music\\kekypw9cqqfrj2miyl-6.mp3.vhd")) returned 1 [0268.076] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d648560, ftCreationTime.dwHighDateTime=0x1d5e74d, ftLastAccessTime.dwLowDateTime=0x7ab15d00, ftLastAccessTime.dwHighDateTime=0x1d5e9c9, ftLastWriteTime.dwLowDateTime=0x7ab15d00, ftLastWriteTime.dwHighDateTime=0x1d5e9c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QoG-Ft8hoZZQHdB5mevU", cAlternateFileName="QOG-FT~1")) returned 1 [0268.076] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98680 [0268.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc94378 [0268.077] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a22c5e0, ftCreationTime.dwHighDateTime=0x1d5ec93, ftLastAccessTime.dwLowDateTime=0xbf2ea5d0, ftLastAccessTime.dwHighDateTime=0x1d5e264, ftLastWriteTime.dwLowDateTime=0xbf2ea5d0, ftLastWriteTime.dwHighDateTime=0x1d5e264, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tE4Bqc929X72cu", cAlternateFileName="TE4BQC~1")) returned 1 [0268.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98510 [0268.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4a) returned 0xc99730 [0268.077] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe297dc50, ftCreationTime.dwHighDateTime=0x1d5e311, ftLastAccessTime.dwLowDateTime=0x15096d40, ftLastAccessTime.dwHighDateTime=0x1d5ecb6, ftLastWriteTime.dwLowDateTime=0x15096d40, ftLastWriteTime.dwHighDateTime=0x1d5ecb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpvbTUriu7n3A8ZjDD", cAlternateFileName="WPVBTU~1")) returned 1 [0268.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98580 [0268.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0xc94498 [0268.077] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe297dc50, ftCreationTime.dwHighDateTime=0x1d5e311, ftLastAccessTime.dwLowDateTime=0x15096d40, ftLastAccessTime.dwHighDateTime=0x1d5ecb6, ftLastWriteTime.dwLowDateTime=0x15096d40, ftLastWriteTime.dwHighDateTime=0x1d5ecb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpvbTUriu7n3A8ZjDD", cAlternateFileName="WPVBTU~1")) returned 0 [0268.077] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0268.077] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0268.078] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.078] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0268.078] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0268.080] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0268.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.080] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0268.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.082] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.083] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.084] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.085] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0268.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0268.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0268.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0268.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0268.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0268.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98650 [0268.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0268.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0268.088] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98650 | out: hHeap=0x2750000) returned 1 [0268.088] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0268.089] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0268.089] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0268.089] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0268.089] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0268.089] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0268.089] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0268.089] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0268.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0268.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0268.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0268.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0268.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0268.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1f5, lpOverlapped=0x0) returned 1 [0268.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0268.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x200, lpOverlapped=0x0) returned 1 [0268.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0268.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0268.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.001] CloseHandle (hObject=0x1f0) returned 1 [0269.005] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.005] SetEndOfFile (hFile=0x1e0) returned 1 [0269.005] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.vhd" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk.vhd")) returned 1 [0269.006] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0269.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.240] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.241] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0269.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0269.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0269.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0269.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0269.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0269.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0269.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0269.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.241] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0269.242] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0269.242] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0269.242] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0269.242] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0269.242] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0269.243] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0269.243] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.243] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.243] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0269.243] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3ae, lpOverlapped=0x0) returned 1 [0269.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc52, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3b0, lpOverlapped=0x0) returned 1 [0269.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.245] CloseHandle (hObject=0x1f0) returned 1 [0269.245] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.245] SetEndOfFile (hFile=0x1e0) returned 1 [0269.245] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.vhd" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk.vhd")) returned 1 [0269.246] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0269.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.248] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.248] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.428] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0269.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0269.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc990a8 [0269.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc990a8 | out: hHeap=0x2750000) returned 1 [0269.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0269.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98520 [0269.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0269.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98520 | out: hHeap=0x2750000) returned 1 [0269.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.432] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.432] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0269.432] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0269.432] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0269.432] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0269.432] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0269.432] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0269.433] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0269.433] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.433] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.433] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0269.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x53a, lpOverlapped=0x0) returned 1 [0269.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffac6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x540, lpOverlapped=0x0) returned 1 [0269.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.434] CloseHandle (hObject=0x1f0) returned 1 [0269.434] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.434] SetEndOfFile (hFile=0x1e0) returned 1 [0269.434] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.vhd" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk.vhd")) returned 1 [0269.435] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0 [0269.435] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0269.435] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0269.436] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.436] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0269.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0269.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0269.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0269.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0269.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc99c60 [0269.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98520 [0269.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0269.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98520 | out: hHeap=0x2750000) returned 1 [0269.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.444] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0269.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0269.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc99c60 [0269.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0269.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99c60 | out: hHeap=0x2750000) returned 1 [0269.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0269.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0269.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0269.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd0, lpOverlapped=0x0) returned 1 [0269.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff30, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.446] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd0, lpOverlapped=0x0) returned 1 [0269.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.447] CloseHandle (hObject=0x1f0) returned 1 [0269.447] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.448] SetEndOfFile (hFile=0x1e0) returned 1 [0269.448] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), lpNewFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url.vhd" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url.vhd")) returned 1 [0269.455] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0269.455] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0269.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98650 [0269.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x40) returned 0xc9a0c0 [0269.456] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0 [0269.457] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0269.457] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0269.457] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.457] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0269.457] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0269.457] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0269.457] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8b9144f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b9144f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0269.458] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe8b9144f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b9144f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.458] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78877d0, ftCreationTime.dwHighDateTime=0x1d57b74, ftLastAccessTime.dwLowDateTime=0x42f515f0, ftLastAccessTime.dwHighDateTime=0x1d5d9d4, ftLastWriteTime.dwLowDateTime=0x42f515f0, ftLastWriteTime.dwHighDateTime=0x1d5d9d4, nFileSizeHigh=0x0, nFileSizeLow=0xd82b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-YWR_obqh-_Cwq2.docx", cAlternateFileName="-YWR_O~1.DOC")) returned 1 [0269.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-YWR_obqh-_Cwq2.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-ywr_obqh-_cwq2.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.466] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0269.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0269.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99100 [0269.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99100 | out: hHeap=0x2750000) returned 1 [0269.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0269.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0269.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0269.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0269.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.467] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0269.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0269.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0269.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0269.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0269.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0269.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0269.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0269.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x182b, lpOverlapped=0x0) returned 1 [0269.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe7d5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1830, lpOverlapped=0x0) returned 1 [0269.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.474] CloseHandle (hObject=0x1f0) returned 1 [0269.474] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.474] SetEndOfFile (hFile=0x1e0) returned 1 [0269.476] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\-YWR_obqh-_Cwq2.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-ywr_obqh-_cwq2.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\-YWR_obqh-_Cwq2.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\-ywr_obqh-_cwq2.docx.vhd")) returned 1 [0269.477] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc773430, ftCreationTime.dwHighDateTime=0x1d5c71f, ftLastAccessTime.dwLowDateTime=0x81ba9fe0, ftLastAccessTime.dwHighDateTime=0x1d5cc27, ftLastWriteTime.dwLowDateTime=0x81ba9fe0, ftLastWriteTime.dwHighDateTime=0x1d5cc27, nFileSizeHigh=0x0, nFileSizeLow=0x7161, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2YkRPd38BAOhd.docx", cAlternateFileName="2YKRPD~1.DOC")) returned 1 [0269.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\2YkRPd38BAOhd.docx" (normalized: "c:\\users\\fd1hvy\\documents\\2ykrpd38baohd.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.486] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0269.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0269.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99578 [0269.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99578 | out: hHeap=0x2750000) returned 1 [0269.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0269.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984c0 [0269.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0269.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984c0 | out: hHeap=0x2750000) returned 1 [0269.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.487] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0269.488] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0269.488] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0269.488] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0269.488] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0269.488] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0269.489] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0269.490] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.490] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.490] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0269.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1161, lpOverlapped=0x0) returned 1 [0269.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee9f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1170, lpOverlapped=0x0) returned 1 [0269.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.493] CloseHandle (hObject=0x1f0) returned 1 [0269.493] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.493] SetEndOfFile (hFile=0x1e0) returned 1 [0269.495] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\2YkRPd38BAOhd.docx" (normalized: "c:\\users\\fd1hvy\\documents\\2ykrpd38baohd.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\2YkRPd38BAOhd.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\2ykrpd38baohd.docx.vhd")) returned 1 [0269.495] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49923c0, ftCreationTime.dwHighDateTime=0x1d5641a, ftLastAccessTime.dwLowDateTime=0x3acce3c0, ftLastAccessTime.dwHighDateTime=0x1d5dff7, ftLastWriteTime.dwLowDateTime=0x3acce3c0, ftLastWriteTime.dwHighDateTime=0x1d5dff7, nFileSizeHigh=0x0, nFileSizeLow=0x26a7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5YtAa1UTbzhR-8IWI7.pptx", cAlternateFileName="5YTAA1~1.PPT")) returned 1 [0269.496] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5YtAa1UTbzhR-8IWI7.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\5ytaa1utbzhr-8iwi7.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0269.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0269.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0269.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0269.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0269.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0269.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0269.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0269.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0269.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.513] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0269.513] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0269.513] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0269.513] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0269.513] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0269.513] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0269.514] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0269.514] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0269.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0269.515] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0269.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0269.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0269.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x6a7, lpOverlapped=0x0) returned 1 [0269.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff959, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x6b0, lpOverlapped=0x0) returned 1 [0269.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0269.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0269.518] CloseHandle (hObject=0x1f0) returned 1 [0269.518] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0269.518] SetEndOfFile (hFile=0x1e0) returned 1 [0269.520] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\5YtAa1UTbzhR-8IWI7.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\5ytaa1utbzhr-8iwi7.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\5YtAa1UTbzhR-8IWI7.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\5ytaa1utbzhr-8iwi7.pptx.vhd")) returned 1 [0269.521] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0269.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0269.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0269.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.188] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.189] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.190] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.191] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.192] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.193] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.194] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.195] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.197] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ef0 [0270.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ef0 | out: hHeap=0x2750000) returned 1 [0270.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0270.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0270.198] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.198] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.198] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0270.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.199] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0270.199] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.199] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0270.200] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0270.200] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.200] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.200] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.200] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.219] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.220] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.220] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.221] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.222] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.223] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.227] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.228] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.228] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.228] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.229] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.240] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.241] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0270.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.242] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0270.242] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.243] CloseHandle (hObject=0x1f0) returned 1 [0270.243] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.243] SetEndOfFile (hFile=0x1e0) returned 1 [0270.244] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb.vhd")) returned 1 [0270.263] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0270.263] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9bb9b40, ftCreationTime.dwHighDateTime=0x1d5ea79, ftLastAccessTime.dwLowDateTime=0xa395300, ftLastAccessTime.dwHighDateTime=0x1d5e5e8, ftLastWriteTime.dwLowDateTime=0xa395300, ftLastWriteTime.dwHighDateTime=0x1d5e5e8, nFileSizeHigh=0x0, nFileSizeLow=0x14e36, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ehi2FhBe24yhIGovtC53.odp", cAlternateFileName="EHI2FH~1.ODP")) returned 1 [0270.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Ehi2FhBe24yhIGovtC53.odp" (normalized: "c:\\users\\fd1hvy\\documents\\ehi2fhbe24yhigovtc53.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.264] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.265] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.266] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0270.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0270.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0270.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.273] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0270.273] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.274] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.274] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93088 [0270.274] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.274] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0270.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.274] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0270.275] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93088 | out: hHeap=0x2750000) returned 1 [0270.275] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.275] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.275] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe36, lpOverlapped=0x0) returned 1 [0270.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1ca, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe40, lpOverlapped=0x0) returned 1 [0270.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.281] CloseHandle (hObject=0x1f0) returned 1 [0270.281] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.282] SetEndOfFile (hFile=0x1e0) returned 1 [0270.282] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Ehi2FhBe24yhIGovtC53.odp" (normalized: "c:\\users\\fd1hvy\\documents\\ehi2fhbe24yhigovtc53.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Ehi2FhBe24yhIGovtC53.odp.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\ehi2fhbe24yhigovtc53.odp.vhd")) returned 1 [0270.283] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a673d0, ftCreationTime.dwHighDateTime=0x1d5bb97, ftLastAccessTime.dwLowDateTime=0x30a646c0, ftLastAccessTime.dwHighDateTime=0x1d5ecef, ftLastWriteTime.dwLowDateTime=0x30a646c0, ftLastWriteTime.dwHighDateTime=0x1d5ecef, nFileSizeHigh=0x0, nFileSizeLow=0x520f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EOksqCvlZ_lki qh0.docx", cAlternateFileName="EOKSQC~1.DOC")) returned 1 [0270.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\EOksqCvlZ_lki qh0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\eoksqcvlz_lki qh0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.283] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.283] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0270.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0270.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98530 [0270.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98530 | out: hHeap=0x2750000) returned 1 [0270.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.292] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.292] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0270.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0270.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0270.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0270.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x120f, lpOverlapped=0x0) returned 1 [0270.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffedf1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1210, lpOverlapped=0x0) returned 1 [0270.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.296] CloseHandle (hObject=0x1f0) returned 1 [0270.296] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.296] SetEndOfFile (hFile=0x1e0) returned 1 [0270.296] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\EOksqCvlZ_lki qh0.docx" (normalized: "c:\\users\\fd1hvy\\documents\\eoksqcvlz_lki qh0.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\EOksqCvlZ_lki qh0.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\eoksqcvlz_lki qh0.docx.vhd")) returned 1 [0270.300] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4ea3de0, ftCreationTime.dwHighDateTime=0x1d56bca, ftLastAccessTime.dwLowDateTime=0x907ca010, ftLastAccessTime.dwHighDateTime=0x1d593c3, ftLastWriteTime.dwLowDateTime=0x907ca010, ftLastWriteTime.dwHighDateTime=0x1d593c3, nFileSizeHigh=0x0, nFileSizeLow=0x13ce2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gq5qJNxR2D5.pptx", cAlternateFileName="GQ5QJN~1.PPT")) returned 1 [0270.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\gq5qJNxR2D5.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\gq5qjnxr2d5.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.307] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.307] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.307] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc994c8 [0270.307] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc994c8 | out: hHeap=0x2750000) returned 1 [0270.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985a0 [0270.308] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.308] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.308] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985a0 | out: hHeap=0x2750000) returned 1 [0270.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.308] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.308] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0270.308] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0270.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.309] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0270.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0270.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.316] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.316] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.317] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1ce2, lpOverlapped=0x0) returned 1 [0270.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe31e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1cf0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1cf0, lpOverlapped=0x0) returned 1 [0270.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.321] CloseHandle (hObject=0x1f0) returned 1 [0270.321] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.321] SetEndOfFile (hFile=0x1e0) returned 1 [0270.324] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\gq5qJNxR2D5.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\gq5qjnxr2d5.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\gq5qJNxR2D5.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\gq5qjnxr2d5.pptx.vhd")) returned 1 [0270.325] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89eb9120, ftCreationTime.dwHighDateTime=0x1d58257, ftLastAccessTime.dwLowDateTime=0xbfb49780, ftLastAccessTime.dwHighDateTime=0x1d56aeb, ftLastWriteTime.dwLowDateTime=0xbfb49780, ftLastWriteTime.dwHighDateTime=0x1d56aeb, nFileSizeHigh=0x0, nFileSizeLow=0x6259, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iaGYC.pptx", cAlternateFileName="IAGYC~1.PPT")) returned 1 [0270.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\iaGYC.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\iagyc.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.331] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc993c0 [0270.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc993c0 | out: hHeap=0x2750000) returned 1 [0270.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.337] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98600 [0270.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.337] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98600 | out: hHeap=0x2750000) returned 1 [0270.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.338] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0270.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.338] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0270.338] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.339] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0270.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0270.340] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.340] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x259, lpOverlapped=0x0) returned 1 [0270.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffda7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x260, lpOverlapped=0x0) returned 1 [0270.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.344] CloseHandle (hObject=0x1f0) returned 1 [0270.345] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.345] SetEndOfFile (hFile=0x1e0) returned 1 [0270.346] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\iaGYC.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\iagyc.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\iaGYC.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\iagyc.pptx.vhd")) returned 1 [0270.347] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43c3290, ftCreationTime.dwHighDateTime=0x1d5c776, ftLastAccessTime.dwLowDateTime=0x160b0440, ftLastAccessTime.dwHighDateTime=0x1d5a474, ftLastWriteTime.dwLowDateTime=0x160b0440, ftLastWriteTime.dwHighDateTime=0x1d5a474, nFileSizeHigh=0x0, nFileSizeLow=0xc39a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jVZb8_.xlsx", cAlternateFileName="JVZB8_~1.XLS")) returned 1 [0270.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jVZb8_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jvzb8_.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.359] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0270.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0270.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0270.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0270.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.360] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.360] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.360] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0270.361] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.361] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0270.361] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.361] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0270.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0270.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x39a, lpOverlapped=0x0) returned 1 [0270.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc66, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3a0, lpOverlapped=0x0) returned 1 [0270.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.368] CloseHandle (hObject=0x1f0) returned 1 [0270.368] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.368] SetEndOfFile (hFile=0x1e0) returned 1 [0270.371] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jVZb8_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jvzb8_.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jVZb8_.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\jvzb8_.xlsx.vhd")) returned 1 [0270.373] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419e1ac0, ftCreationTime.dwHighDateTime=0x1d5ee07, ftLastAccessTime.dwLowDateTime=0x9c56f040, ftLastAccessTime.dwHighDateTime=0x1d58449, ftLastWriteTime.dwLowDateTime=0x9c56f040, ftLastWriteTime.dwHighDateTime=0x1d58449, nFileSizeHigh=0x0, nFileSizeLow=0x439d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lLftZZ4lnN4GlGu.xlsx", cAlternateFileName="LLFTZZ~1.XLS")) returned 1 [0270.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\lLftZZ4lnN4GlGu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\llftzz4lnn4glgu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.385] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0270.385] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0270.386] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.386] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98520 [0270.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98520 | out: hHeap=0x2750000) returned 1 [0270.386] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.387] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0270.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.387] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0270.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.387] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0270.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0270.388] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.388] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x39d, lpOverlapped=0x0) returned 1 [0270.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc63, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.443] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3a0, lpOverlapped=0x0) returned 1 [0270.443] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.444] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.444] CloseHandle (hObject=0x1f0) returned 1 [0270.445] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.445] SetEndOfFile (hFile=0x1e0) returned 1 [0270.449] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\lLftZZ4lnN4GlGu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\llftzz4lnn4glgu.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\lLftZZ4lnN4GlGu.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\llftzz4lnn4glgu.xlsx.vhd")) returned 1 [0270.450] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49993e0, ftCreationTime.dwHighDateTime=0x1d5e6a1, ftLastAccessTime.dwLowDateTime=0xee0a4ef0, ftLastAccessTime.dwHighDateTime=0x1d5e42a, ftLastWriteTime.dwLowDateTime=0xee0a4ef0, ftLastWriteTime.dwHighDateTime=0x1d5e42a, nFileSizeHigh=0x0, nFileSizeLow=0xc22, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mi4delVWk7ddnVUT.csv", cAlternateFileName="MI4DEL~1.CSV")) returned 1 [0270.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Mi4delVWk7ddnVUT.csv" (normalized: "c:\\users\\fd1hvy\\documents\\mi4delvwk7ddnvut.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0270.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0270.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985a0 [0270.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985a0 | out: hHeap=0x2750000) returned 1 [0270.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.467] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0270.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0270.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0270.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0270.469] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.469] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.470] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xc22, lpOverlapped=0x0) returned 1 [0270.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff3de, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc30, lpOverlapped=0x0) returned 1 [0270.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.472] CloseHandle (hObject=0x1f0) returned 1 [0270.472] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.472] SetEndOfFile (hFile=0x1e0) returned 1 [0270.478] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Mi4delVWk7ddnVUT.csv" (normalized: "c:\\users\\fd1hvy\\documents\\mi4delvwk7ddnvut.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Mi4delVWk7ddnVUT.csv.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\mi4delvwk7ddnvut.csv.vhd")) returned 1 [0270.479] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0270.479] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0270.479] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0270.479] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0270.480] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a1b500, ftCreationTime.dwHighDateTime=0x1d5a157, ftLastAccessTime.dwLowDateTime=0x390434b0, ftLastAccessTime.dwHighDateTime=0x1d5b173, ftLastWriteTime.dwLowDateTime=0x390434b0, ftLastWriteTime.dwHighDateTime=0x1d5b173, nFileSizeHigh=0x0, nFileSizeLow=0x97f7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="o9FLmD8sOLr.xlsx", cAlternateFileName="O9FLMD~1.XLS")) returned 1 [0270.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\o9FLmD8sOLr.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\o9flmd8solr.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.498] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.499] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.499] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.499] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.500] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0270.500] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0270.500] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.500] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0270.500] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.500] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.501] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0270.501] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.501] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.501] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.501] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0270.501] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.501] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0270.502] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.502] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0270.503] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0270.503] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.503] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.503] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.503] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.504] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x17f7, lpOverlapped=0x0) returned 1 [0270.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe809, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1800, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1800, lpOverlapped=0x0) returned 1 [0270.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.508] CloseHandle (hObject=0x1f0) returned 1 [0270.508] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.508] SetEndOfFile (hFile=0x1e0) returned 1 [0270.547] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\o9FLmD8sOLr.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\o9flmd8solr.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\o9FLmD8sOLr.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\o9flmd8solr.xlsx.vhd")) returned 1 [0270.548] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0270.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc985a0 [0270.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98f48 [0270.549] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b00bb0, ftCreationTime.dwHighDateTime=0x1d5a31b, ftLastAccessTime.dwLowDateTime=0x7d638970, ftLastAccessTime.dwHighDateTime=0x1d5be3f, ftLastWriteTime.dwLowDateTime=0x7d638970, ftLastWriteTime.dwHighDateTime=0x1d5be3f, nFileSizeHigh=0x0, nFileSizeLow=0x8684, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="P0ECD8eTQ4MM.pptx", cAlternateFileName="P0ECD8~1.PPT")) returned 1 [0270.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\P0ECD8eTQ4MM.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\p0ecd8etq4mm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ef0 [0270.584] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ef0 | out: hHeap=0x2750000) returned 1 [0270.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.584] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984a0 [0270.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984a0 | out: hHeap=0x2750000) returned 1 [0270.585] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.585] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0270.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0270.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0270.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0270.588] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.588] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.588] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x684, lpOverlapped=0x0) returned 1 [0270.592] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff97c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x690, lpOverlapped=0x0) returned 1 [0270.593] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.593] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.594] CloseHandle (hObject=0x1f0) returned 1 [0270.599] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.599] SetEndOfFile (hFile=0x1e0) returned 1 [0270.613] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\P0ECD8eTQ4MM.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\p0ecd8etq4mm.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\P0ECD8eTQ4MM.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\p0ecd8etq4mm.pptx.vhd")) returned 1 [0270.614] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d17470, ftCreationTime.dwHighDateTime=0x1d564de, ftLastAccessTime.dwLowDateTime=0x9b040ab0, ftLastAccessTime.dwHighDateTime=0x1d5b6ef, ftLastWriteTime.dwLowDateTime=0x9b040ab0, ftLastWriteTime.dwHighDateTime=0x1d5b6ef, nFileSizeHigh=0x0, nFileSizeLow=0xa966, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PQqxKv0rvcYSVF7-cnnW.pptx", cAlternateFileName="PQQXKV~1.PPT")) returned 1 [0270.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\PQqxKv0rvcYSVF7-cnnW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pqqxkv0rvcysvf7-cnnw.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.634] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0270.653] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0270.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.653] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0270.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0270.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.658] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0270.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0270.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0270.660] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0270.660] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.660] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.660] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.663] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.663] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.664] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.664] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x966, lpOverlapped=0x0) returned 1 [0270.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff69a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x970, lpOverlapped=0x0) returned 1 [0270.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.667] CloseHandle (hObject=0x1f0) returned 1 [0270.667] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.668] SetEndOfFile (hFile=0x1e0) returned 1 [0270.669] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\PQqxKv0rvcYSVF7-cnnW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pqqxkv0rvcysvf7-cnnw.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\PQqxKv0rvcYSVF7-cnnW.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\pqqxkv0rvcysvf7-cnnw.pptx.vhd")) returned 1 [0270.670] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06fee40, ftCreationTime.dwHighDateTime=0x1d5ea74, ftLastAccessTime.dwLowDateTime=0xe6f6bb20, ftLastAccessTime.dwHighDateTime=0x1d5e9cb, ftLastWriteTime.dwLowDateTime=0xe6f6bb20, ftLastWriteTime.dwHighDateTime=0x1d5e9cb, nFileSizeHigh=0x0, nFileSizeLow=0xb49d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SYVG295jt.odp", cAlternateFileName="SYVG29~1.ODP")) returned 1 [0270.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SYVG295jt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\syvg295jt.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0270.684] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0270.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98520 [0270.684] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98520 | out: hHeap=0x2750000) returned 1 [0270.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.685] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0270.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.689] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0270.690] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.690] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0270.691] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0270.691] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.691] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.691] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x149d, lpOverlapped=0x0) returned 1 [0270.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb63, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x14a0, lpOverlapped=0x0) returned 1 [0270.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.697] CloseHandle (hObject=0x1f0) returned 1 [0270.697] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.697] SetEndOfFile (hFile=0x1e0) returned 1 [0270.699] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SYVG295jt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\syvg295jt.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SYVG295jt.odp.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\syvg295jt.odp.vhd")) returned 1 [0270.700] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e0f4f0, ftCreationTime.dwHighDateTime=0x1d5e4a8, ftLastAccessTime.dwLowDateTime=0x272a47d0, ftLastAccessTime.dwHighDateTime=0x1d5ed95, ftLastWriteTime.dwLowDateTime=0x272a47d0, ftLastWriteTime.dwHighDateTime=0x1d5ed95, nFileSizeHigh=0x0, nFileSizeLow=0xc7d4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="T-RdpzuCnU22yUl.pptx", cAlternateFileName="T-RDPZ~1.PPT")) returned 1 [0270.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T-RdpzuCnU22yUl.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t-rdpzucnu22yul.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.711] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0270.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0270.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0270.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0270.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.712] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.713] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0270.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0270.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0270.714] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0270.714] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.714] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.714] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.716] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x7d4, lpOverlapped=0x0) returned 1 [0270.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff82c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x7e0, lpOverlapped=0x0) returned 1 [0270.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.720] CloseHandle (hObject=0x1f0) returned 1 [0270.721] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.721] SetEndOfFile (hFile=0x1e0) returned 1 [0270.722] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\T-RdpzuCnU22yUl.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t-rdpzucnu22yul.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\T-RdpzuCnU22yUl.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\t-rdpzucnu22yul.pptx.vhd")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b5b6fe0, ftCreationTime.dwHighDateTime=0x1d5e2fd, ftLastAccessTime.dwLowDateTime=0x1ddcc5f0, ftLastAccessTime.dwHighDateTime=0x1d5e506, ftLastWriteTime.dwLowDateTime=0x1ddcc5f0, ftLastWriteTime.dwHighDateTime=0x1d5e506, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UmBMc9Dg3_9j", cAlternateFileName="UMBMC9~1")) returned 1 [0270.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc984a0 [0270.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0xc98ef0 [0270.723] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b3970, ftCreationTime.dwHighDateTime=0x1d5cd42, ftLastAccessTime.dwLowDateTime=0x20cc01f0, ftLastAccessTime.dwHighDateTime=0x1d59299, ftLastWriteTime.dwLowDateTime=0x20cc01f0, ftLastWriteTime.dwHighDateTime=0x1d59299, nFileSizeHigh=0x0, nFileSizeLow=0x1190f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uP33jnU miFJTPFepeN.docx", cAlternateFileName="UP33JN~1.DOC")) returned 1 [0270.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\uP33jnU miFJTPFepeN.docx" (normalized: "c:\\users\\fd1hvy\\documents\\up33jnu mifjtpfepen.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0270.734] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0270.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0270.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0270.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.735] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0270.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0270.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0270.737] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0270.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x190f, lpOverlapped=0x0) returned 1 [0270.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe6f1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1910, lpOverlapped=0x0) returned 1 [0270.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.745] CloseHandle (hObject=0x1f0) returned 1 [0270.745] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.745] SetEndOfFile (hFile=0x1e0) returned 1 [0270.747] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\uP33jnU miFJTPFepeN.docx" (normalized: "c:\\users\\fd1hvy\\documents\\up33jnu mifjtpfepen.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\uP33jnU miFJTPFepeN.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\up33jnu mifjtpfepen.docx.vhd")) returned 1 [0270.748] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd7d10, ftCreationTime.dwHighDateTime=0x1d593f5, ftLastAccessTime.dwLowDateTime=0xb9173f00, ftLastAccessTime.dwHighDateTime=0x1d56621, ftLastWriteTime.dwLowDateTime=0xb9173f00, ftLastWriteTime.dwHighDateTime=0x1d56621, nFileSizeHigh=0x0, nFileSizeLow=0x81e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VihzegN-s3vi.xlsx", cAlternateFileName="VIHZEG~1.XLS")) returned 1 [0270.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\VihzegN-s3vi.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\vihzegn-s3vi.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.749] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.759] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.759] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.760] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0270.760] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0270.760] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.760] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98530 [0270.760] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.760] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.760] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98530 | out: hHeap=0x2750000) returned 1 [0270.760] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.760] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.761] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.761] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0270.761] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.761] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0270.761] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.761] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0270.762] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0270.763] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.763] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.763] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.764] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.765] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1e3, lpOverlapped=0x0) returned 1 [0270.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe1d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f0, lpOverlapped=0x0) returned 1 [0270.768] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.768] CloseHandle (hObject=0x1f0) returned 1 [0270.769] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.769] SetEndOfFile (hFile=0x1e0) returned 1 [0270.770] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\VihzegN-s3vi.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\vihzegn-s3vi.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\VihzegN-s3vi.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\vihzegn-s3vi.xlsx.vhd")) returned 1 [0270.771] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7985210, ftCreationTime.dwHighDateTime=0x1d5cafc, ftLastAccessTime.dwLowDateTime=0xacff0610, ftLastAccessTime.dwHighDateTime=0x1d5ccbc, ftLastWriteTime.dwLowDateTime=0xacff0610, ftLastWriteTime.dwHighDateTime=0x1d5ccbc, nFileSizeHigh=0x0, nFileSizeLow=0x1af0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vlj0xTS.docx", cAlternateFileName="VLJ0XT~1.DOC")) returned 1 [0270.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\vlj0xTS.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vlj0xts.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc995d0 [0270.786] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc995d0 | out: hHeap=0x2750000) returned 1 [0270.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.787] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0270.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0270.787] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.787] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.787] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0270.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.788] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0270.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.788] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0270.789] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0270.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1af0, lpOverlapped=0x0) returned 1 [0270.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe510, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1af0, lpOverlapped=0x0) returned 1 [0270.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.791] CloseHandle (hObject=0x1f0) returned 1 [0270.792] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.792] SetEndOfFile (hFile=0x1e0) returned 1 [0270.793] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\vlj0xTS.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vlj0xts.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\vlj0xTS.docx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\vlj0xts.docx.vhd")) returned 1 [0270.794] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81b0cc30, ftCreationTime.dwHighDateTime=0x1d5f013, ftLastAccessTime.dwLowDateTime=0xae9f200, ftLastAccessTime.dwHighDateTime=0x1d5e66f, ftLastWriteTime.dwLowDateTime=0xae9f200, ftLastWriteTime.dwHighDateTime=0x1d5e66f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vyhV-EaHSLw8zk", cAlternateFileName="VYHV-E~1")) returned 1 [0270.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98520 [0270.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0xc944f8 [0270.795] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36428220, ftCreationTime.dwHighDateTime=0x1d5cad9, ftLastAccessTime.dwLowDateTime=0x28d2e5d0, ftLastAccessTime.dwHighDateTime=0x1d57804, ftLastWriteTime.dwLowDateTime=0x28d2e5d0, ftLastWriteTime.dwHighDateTime=0x1d57804, nFileSizeHigh=0x0, nFileSizeLow=0x33f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="woUQqIx_iLKCz.xlsx", cAlternateFileName="WOUQQI~1.XLS")) returned 1 [0270.795] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\woUQqIx_iLKCz.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\wouqqix_ilkcz.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.805] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.806] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0270.808] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0270.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0270.808] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.808] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.808] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0270.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.808] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.808] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0270.808] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.809] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0270.809] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.809] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0270.810] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0270.810] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.810] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.810] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.810] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x13f5, lpOverlapped=0x0) returned 1 [0270.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec0b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1400, lpOverlapped=0x0) returned 1 [0270.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.812] CloseHandle (hObject=0x1f0) returned 1 [0270.812] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.812] SetEndOfFile (hFile=0x1e0) returned 1 [0270.814] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\woUQqIx_iLKCz.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\wouqqix_ilkcz.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\woUQqIx_iLKCz.xlsx.vhd" (normalized: "c:\\users\\fd1hvy\\documents\\wouqqix_ilkcz.xlsx.vhd")) returned 1 [0270.815] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36428220, ftCreationTime.dwHighDateTime=0x1d5cad9, ftLastAccessTime.dwLowDateTime=0x28d2e5d0, ftLastAccessTime.dwHighDateTime=0x1d57804, ftLastWriteTime.dwLowDateTime=0x28d2e5d0, ftLastWriteTime.dwHighDateTime=0x1d57804, nFileSizeHigh=0x0, nFileSizeLow=0x33f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="woUQqIx_iLKCz.xlsx", cAlternateFileName="WOUQQI~1.XLS")) returned 0 [0270.815] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0270.815] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa218de04, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xa218de04, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0270.815] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa218de04, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xa218de04, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.815] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225bfd0, ftCreationTime.dwHighDateTime=0x1d5e9d2, ftLastAccessTime.dwLowDateTime=0x22285a10, ftLastAccessTime.dwHighDateTime=0x1d5ea2f, ftLastWriteTime.dwLowDateTime=0x22285a10, ftLastWriteTime.dwHighDateTime=0x1d5ea2f, nFileSizeHigh=0x0, nFileSizeLow=0x72ad, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-qbx9O.swf", cAlternateFileName="")) returned 1 [0270.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-qbx9O.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\-qbx9o.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0270.822] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0270.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0270.822] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.822] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.822] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0270.822] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.823] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.823] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.823] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0270.823] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.823] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0270.823] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.823] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0270.824] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0270.825] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.825] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.825] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.826] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.826] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.827] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12ad, lpOverlapped=0x0) returned 1 [0270.827] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed53, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12b0, lpOverlapped=0x0) returned 1 [0270.828] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.828] CloseHandle (hObject=0x1f0) returned 1 [0270.829] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.829] SetEndOfFile (hFile=0x1e0) returned 1 [0270.830] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\-qbx9O.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\-qbx9o.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\-qbx9O.swf.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\-qbx9o.swf.vhd")) returned 1 [0270.832] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b006570, ftCreationTime.dwHighDateTime=0x1d5e0de, ftLastAccessTime.dwLowDateTime=0xd2ab5ee0, ftLastAccessTime.dwHighDateTime=0x1d5e12a, ftLastWriteTime.dwLowDateTime=0xd2ab5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e12a, nFileSizeHigh=0x0, nFileSizeLow=0x6fea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3PIM0wGAVB.wav", cAlternateFileName="3PIM0W~1.WAV")) returned 1 [0270.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3PIM0wGAVB.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\3pim0wgavb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.834] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.835] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.844] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0270.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0270.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98600 [0270.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98600 | out: hHeap=0x2750000) returned 1 [0270.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.846] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0270.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.846] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0270.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.847] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0270.848] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0270.848] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.848] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.848] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.849] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.849] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.850] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xfea, lpOverlapped=0x0) returned 1 [0270.851] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff016, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xff0, lpOverlapped=0x0) returned 1 [0270.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.853] CloseHandle (hObject=0x1f0) returned 1 [0270.854] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.854] SetEndOfFile (hFile=0x1e0) returned 1 [0270.856] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\3PIM0wGAVB.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\3pim0wgavb.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\3PIM0wGAVB.wav.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\3pim0wgavb.wav.vhd")) returned 1 [0270.857] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556f7170, ftCreationTime.dwHighDateTime=0x1d5ee57, ftLastAccessTime.dwLowDateTime=0xdbeac5b0, ftLastAccessTime.dwHighDateTime=0x1d5e6f5, ftLastWriteTime.dwLowDateTime=0xdbeac5b0, ftLastWriteTime.dwHighDateTime=0x1d5e6f5, nFileSizeHigh=0x0, nFileSizeLow=0x2725, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5V5exoAYEin.odt", cAlternateFileName="5V5EXO~1.ODT")) returned 1 [0270.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5V5exoAYEin.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5v5exoayein.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.859] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.860] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.861] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.862] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.863] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.864] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.865] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.866] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.867] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.868] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.869] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.869] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc992b8 [0270.869] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc992b8 | out: hHeap=0x2750000) returned 1 [0270.870] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.870] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0270.870] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.870] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.870] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0270.870] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.870] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.870] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.871] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0270.871] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.871] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0270.871] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.871] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0270.872] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0270.872] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.873] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.873] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.874] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x725, lpOverlapped=0x0) returned 1 [0270.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff8db, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x730, lpOverlapped=0x0) returned 1 [0270.875] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.876] CloseHandle (hObject=0x1f0) returned 1 [0270.877] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.877] SetEndOfFile (hFile=0x1e0) returned 1 [0270.878] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\5V5exoAYEin.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5v5exoayein.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\5V5exoAYEin.odt.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\5v5exoayein.odt.vhd")) returned 1 [0270.880] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee5334f0, ftCreationTime.dwHighDateTime=0x1d5e7f2, ftLastAccessTime.dwLowDateTime=0xde9baf20, ftLastAccessTime.dwHighDateTime=0x1d5edeb, ftLastWriteTime.dwLowDateTime=0xde9baf20, ftLastWriteTime.dwHighDateTime=0x1d5edeb, nFileSizeHigh=0x0, nFileSizeLow=0xe379, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8-EcZw9wP.m4a", cAlternateFileName="8-ECZW~1.M4A")) returned 1 [0270.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8-EcZw9wP.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\8-eczw9wp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.882] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.884] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.885] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.886] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.887] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.888] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.895] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.895] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.896] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98d90 [0270.896] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98d90 | out: hHeap=0x2750000) returned 1 [0270.896] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.896] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0270.896] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.896] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.896] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0270.896] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.897] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.897] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0270.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.897] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0270.897] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.898] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0270.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0270.899] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.899] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.900] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.900] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.901] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.903] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x379, lpOverlapped=0x0) returned 1 [0270.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc87, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x380, lpOverlapped=0x0) returned 1 [0270.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.906] CloseHandle (hObject=0x1f0) returned 1 [0270.907] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.908] SetEndOfFile (hFile=0x1e0) returned 1 [0270.910] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\8-EcZw9wP.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\8-eczw9wp.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\8-EcZw9wP.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\8-eczw9wp.m4a.vhd")) returned 1 [0270.911] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b3a9c0, ftCreationTime.dwHighDateTime=0x1d5e703, ftLastAccessTime.dwLowDateTime=0x676ce140, ftLastAccessTime.dwHighDateTime=0x1d5e8ae, ftLastWriteTime.dwLowDateTime=0x676ce140, ftLastWriteTime.dwHighDateTime=0x1d5e8ae, nFileSizeHigh=0x0, nFileSizeLow=0x18acc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8UGZja.mp3", cAlternateFileName="")) returned 1 [0270.912] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8UGZja.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\8ugzja.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.915] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.916] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.917] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.918] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.919] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.920] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.921] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.922] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.923] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.923] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.923] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0270.924] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0270.924] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.924] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0270.924] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.924] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.924] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0270.924] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.924] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.924] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0270.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.925] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0270.925] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.925] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0270.926] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0270.926] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.926] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.926] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xacc, lpOverlapped=0x0) returned 1 [0270.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff534, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xad0, lpOverlapped=0x0) returned 1 [0270.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.934] CloseHandle (hObject=0x1f0) returned 1 [0270.936] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.936] SetEndOfFile (hFile=0x1e0) returned 1 [0270.937] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\8UGZja.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\8ugzja.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\8UGZja.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\8ugzja.mp3.vhd")) returned 1 [0270.938] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e1aa5c0, ftCreationTime.dwHighDateTime=0x1d5e827, ftLastAccessTime.dwLowDateTime=0xfc9b6a80, ftLastAccessTime.dwHighDateTime=0x1d5e4f2, ftLastWriteTime.dwLowDateTime=0xfc9b6a80, ftLastWriteTime.dwHighDateTime=0x1d5e4f2, nFileSizeHigh=0x0, nFileSizeLow=0x91ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8VPye9CxTnR29X.png", cAlternateFileName="8VPYE9~1.PNG")) returned 1 [0270.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\8VPye9CxTnR29X.png" (normalized: "c:\\users\\fd1hvy\\desktop\\8vpye9cxtnr29x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.940] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.941] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.942] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.943] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.944] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.945] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.946] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0270.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0270.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.947] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.947] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0270.947] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.948] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0270.948] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.948] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0270.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0270.949] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.949] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x11ec, lpOverlapped=0x0) returned 1 [0270.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffee14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x11f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x11f0, lpOverlapped=0x0) returned 1 [0270.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.953] CloseHandle (hObject=0x1f0) returned 1 [0270.955] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.955] SetEndOfFile (hFile=0x1e0) returned 1 [0270.956] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\8VPye9CxTnR29X.png" (normalized: "c:\\users\\fd1hvy\\desktop\\8vpye9cxtnr29x.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\8VPye9CxTnR29X.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\8vpye9cxtnr29x.png.vhd")) returned 1 [0270.958] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59bab130, ftCreationTime.dwHighDateTime=0x1d5e34a, ftLastAccessTime.dwLowDateTime=0x63cd0df0, ftLastAccessTime.dwHighDateTime=0x1d5e3bb, ftLastWriteTime.dwLowDateTime=0x63cd0df0, ftLastWriteTime.dwHighDateTime=0x1d5e3bb, nFileSizeHigh=0x0, nFileSizeLow=0x13af6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aEY9EPWm.mp4", cAlternateFileName="")) returned 1 [0270.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\aEY9EPWm.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\aey9epwm.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.964] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.965] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.967] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.968] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.969] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.970] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.970] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0270.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0270.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0270.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0270.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0270.971] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0270.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.971] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0270.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.972] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.972] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0270.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0270.972] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0270.973] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0270.973] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0270.973] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0270.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0270.974] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0270.974] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0270.975] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0270.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0270.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0270.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1af6, lpOverlapped=0x0) returned 1 [0270.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe50a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1b00, lpOverlapped=0x0) returned 1 [0270.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0270.984] CloseHandle (hObject=0x1f0) returned 1 [0270.985] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0270.985] SetEndOfFile (hFile=0x1e0) returned 1 [0270.986] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\aEY9EPWm.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\aey9epwm.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\aEY9EPWm.mp4.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\aey9epwm.mp4.vhd")) returned 1 [0270.988] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30bdba70, ftCreationTime.dwHighDateTime=0x1d5ef20, ftLastAccessTime.dwLowDateTime=0xdbdf5f70, ftLastAccessTime.dwHighDateTime=0x1d5eae4, ftLastWriteTime.dwLowDateTime=0xdbdf5f70, ftLastWriteTime.dwHighDateTime=0x1d5eae4, nFileSizeHigh=0x0, nFileSizeLow=0x834c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AUR1-JymnXb.avi", cAlternateFileName="AUR1-J~1.AVI")) returned 1 [0270.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\AUR1-JymnXb.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\aur1-jymnxb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0270.988] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0270.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0270.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.990] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.991] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.992] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.993] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.994] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.995] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.996] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0270.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0271.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0271.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.000] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.000] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.001] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.001] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.001] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0271.001] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.002] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0271.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.002] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0271.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0271.003] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.003] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x34c, lpOverlapped=0x0) returned 1 [0271.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffcb4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x350, lpOverlapped=0x0) returned 1 [0271.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.009] CloseHandle (hObject=0x1f0) returned 1 [0271.011] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.011] SetEndOfFile (hFile=0x1e0) returned 1 [0271.012] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\AUR1-JymnXb.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\aur1-jymnxb.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\AUR1-JymnXb.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\aur1-jymnxb.avi.vhd")) returned 1 [0271.015] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fb48060, ftCreationTime.dwHighDateTime=0x1d5f05c, ftLastAccessTime.dwLowDateTime=0xbd217440, ftLastAccessTime.dwHighDateTime=0x1d5e2b2, ftLastWriteTime.dwLowDateTime=0xbd217440, ftLastWriteTime.dwHighDateTime=0x1d5e2b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AZ1eoQeDANeJuaChYIsX", cAlternateFileName="AZ1EOQ~1")) returned 1 [0271.015] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98530 [0271.015] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc95188 [0271.015] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x685aaef0, ftCreationTime.dwHighDateTime=0x1d5eb67, ftLastAccessTime.dwLowDateTime=0x20038790, ftLastAccessTime.dwHighDateTime=0x1d5eada, ftLastWriteTime.dwLowDateTime=0x20038790, ftLastWriteTime.dwHighDateTime=0x1d5eada, nFileSizeHigh=0x0, nFileSizeLow=0xa324, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B4yf3wWj8zYDXyY0-8sj.avi", cAlternateFileName="B4YF3W~1.AVI")) returned 1 [0271.015] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\B4yf3wWj8zYDXyY0-8sj.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\b4yf3wwj8zydxyy0-8sj.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.025] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.026] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.027] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.028] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0271.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0271.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.028] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.029] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.114] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.114] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.114] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.114] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0271.114] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.114] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0271.115] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.115] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0271.116] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0271.116] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.116] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.116] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.116] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.117] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.118] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.119] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.120] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x324, lpOverlapped=0x0) returned 1 [0271.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffcdc, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x330, lpOverlapped=0x0) returned 1 [0271.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.122] CloseHandle (hObject=0x1f0) returned 1 [0271.122] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.122] SetEndOfFile (hFile=0x1e0) returned 1 [0271.122] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\B4yf3wWj8zYDXyY0-8sj.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\b4yf3wwj8zydxyy0-8sj.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\B4yf3wWj8zYDXyY0-8sj.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\b4yf3wwj8zydxyy0-8sj.avi.vhd")) returned 1 [0271.124] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a316210, ftCreationTime.dwHighDateTime=0x1d5e7cf, ftLastAccessTime.dwLowDateTime=0x7dddd960, ftLastAccessTime.dwHighDateTime=0x1d5e0f8, ftLastWriteTime.dwLowDateTime=0x7dddd960, ftLastWriteTime.dwHighDateTime=0x1d5e0f8, nFileSizeHigh=0x0, nFileSizeLow=0x52d9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Bh5piw.m4a", cAlternateFileName="")) returned 1 [0271.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Bh5piw.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\bh5piw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.135] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.135] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.135] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99158 [0271.135] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99158 | out: hHeap=0x2750000) returned 1 [0271.135] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.136] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0271.136] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.136] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.136] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0271.136] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.136] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.136] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.136] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0271.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0271.137] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.137] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0271.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0271.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.139] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.139] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.140] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x12d9, lpOverlapped=0x0) returned 1 [0271.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffed27, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x12e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x12e0, lpOverlapped=0x0) returned 1 [0271.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.141] CloseHandle (hObject=0x1f0) returned 1 [0271.142] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.142] SetEndOfFile (hFile=0x1e0) returned 1 [0271.142] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Bh5piw.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\bh5piw.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Bh5piw.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\bh5piw.m4a.vhd")) returned 1 [0271.143] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30861b10, ftCreationTime.dwHighDateTime=0x1d5ede0, ftLastAccessTime.dwLowDateTime=0x536dd010, ftLastAccessTime.dwHighDateTime=0x1d5e73b, ftLastWriteTime.dwLowDateTime=0x536dd010, ftLastWriteTime.dwHighDateTime=0x1d5e73b, nFileSizeHigh=0x0, nFileSizeLow=0xf9bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CJGIqMen1xEeNV.ods", cAlternateFileName="CJGIQM~1.ODS")) returned 1 [0271.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CJGIqMen1xEeNV.ods" (normalized: "c:\\users\\fd1hvy\\desktop\\cjgiqmen1xeenv.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0271.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0271.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0271.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.156] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0271.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.157] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0271.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0271.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0271.158] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0271.158] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.158] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.159] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19bb, lpOverlapped=0x0) returned 1 [0271.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe645, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19c0, lpOverlapped=0x0) returned 1 [0271.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.165] CloseHandle (hObject=0x1f0) returned 1 [0271.165] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.165] SetEndOfFile (hFile=0x1e0) returned 1 [0271.165] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\CJGIqMen1xEeNV.ods" (normalized: "c:\\users\\fd1hvy\\desktop\\cjgiqmen1xeenv.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\CJGIqMen1xEeNV.ods.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\cjgiqmen1xeenv.ods.vhd")) returned 1 [0271.166] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9e27d90, ftCreationTime.dwHighDateTime=0x1d5eb85, ftLastAccessTime.dwLowDateTime=0xc9cb7240, ftLastAccessTime.dwHighDateTime=0x1d5e267, ftLastWriteTime.dwLowDateTime=0xc9cb7240, ftLastWriteTime.dwHighDateTime=0x1d5e267, nFileSizeHigh=0x0, nFileSizeLow=0x10e99, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ctJx.wav", cAlternateFileName="")) returned 1 [0271.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctJx.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ctjx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.168] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.169] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.170] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.177] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.177] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0271.178] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0271.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0271.178] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.178] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.178] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0271.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.178] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.178] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.178] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0271.179] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.179] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0271.179] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.179] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0271.180] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0271.180] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.180] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.180] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.184] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe99, lpOverlapped=0x0) returned 1 [0271.185] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff167, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xea0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xea0, lpOverlapped=0x0) returned 1 [0271.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.187] CloseHandle (hObject=0x1f0) returned 1 [0271.187] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.187] SetEndOfFile (hFile=0x1e0) returned 1 [0271.187] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ctJx.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ctjx.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ctJx.wav.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\ctjx.wav.vhd")) returned 1 [0271.193] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db0c500, ftCreationTime.dwHighDateTime=0x1d6669a, ftLastAccessTime.dwLowDateTime=0x3e495b80, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x91b6ac00, ftLastWriteTime.dwHighDateTime=0x1d66690, nFileSizeHigh=0x0, nFileSizeLow=0x5bd200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CUserstestAppDataLocalTempRar$EXb6200.3208333.exe", cAlternateFileName="CUSERS~1.EXE")) returned 1 [0271.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUserstestAppDataLocalTempRar$EXb6200.3208333.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\cuserstestappdatalocaltemprar$exb6200.3208333.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.194] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9329bc0d, ftCreationTime.dwHighDateTime=0x1d6669a, ftLastAccessTime.dwLowDateTime=0x9329bc0d, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xe109ec3c, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Czuw.pIs", cAlternateFileName="")) returned 1 [0271.194] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fb8e20, ftCreationTime.dwHighDateTime=0x1d5edf8, ftLastAccessTime.dwLowDateTime=0xbb730460, ftLastAccessTime.dwHighDateTime=0x1d5e217, ftLastWriteTime.dwLowDateTime=0xbb730460, ftLastWriteTime.dwHighDateTime=0x1d5e217, nFileSizeHigh=0x0, nFileSizeLow=0x1839c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DaVhtxHul87hCcBhQESs.gif", cAlternateFileName="DAVHTX~1.GIF")) returned 1 [0271.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DaVhtxHul87hCcBhQESs.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\davhtxhul87hccbhqess.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.196] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.197] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.205] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.205] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.205] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc990a8 [0271.205] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc990a8 | out: hHeap=0x2750000) returned 1 [0271.205] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.205] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0271.206] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.206] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.206] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0271.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.206] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.206] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0271.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0271.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0271.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0271.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.211] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.212] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.213] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.214] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.215] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.215] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.216] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.216] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.216] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.217] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x39c, lpOverlapped=0x0) returned 1 [0271.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc64, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3a0, lpOverlapped=0x0) returned 1 [0271.218] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.218] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.219] CloseHandle (hObject=0x1f0) returned 1 [0271.219] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.219] SetEndOfFile (hFile=0x1e0) returned 1 [0271.219] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\DaVhtxHul87hCcBhQESs.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\davhtxhul87hccbhqess.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\DaVhtxHul87hCcBhQESs.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\davhtxhul87hccbhqess.gif.vhd")) returned 1 [0271.220] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0271.220] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7370c0, ftCreationTime.dwHighDateTime=0x1d5ec1f, ftLastAccessTime.dwLowDateTime=0xaea9a4d0, ftLastAccessTime.dwHighDateTime=0x1d5e2e1, ftLastWriteTime.dwLowDateTime=0xaea9a4d0, ftLastWriteTime.dwHighDateTime=0x1d5e2e1, nFileSizeHigh=0x0, nFileSizeLow=0x79db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="egI452Apv.swf", cAlternateFileName="EGI452~1.SWF")) returned 1 [0271.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\egI452Apv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\egi452apv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.221] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.222] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.223] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.225] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0271.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0271.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.232] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0271.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0271.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0271.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0271.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19db, lpOverlapped=0x0) returned 1 [0271.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe625, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19e0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19e0, lpOverlapped=0x0) returned 1 [0271.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.238] CloseHandle (hObject=0x1f0) returned 1 [0271.238] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.238] SetEndOfFile (hFile=0x1e0) returned 1 [0271.239] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\egI452Apv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\egi452apv.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\egI452Apv.swf.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\egi452apv.swf.vhd")) returned 1 [0271.240] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e18b30, ftCreationTime.dwHighDateTime=0x1d5e8a9, ftLastAccessTime.dwLowDateTime=0x7785cdf0, ftLastAccessTime.dwHighDateTime=0x1d5e226, ftLastWriteTime.dwLowDateTime=0x7785cdf0, ftLastWriteTime.dwHighDateTime=0x1d5e226, nFileSizeHigh=0x0, nFileSizeLow=0x7560, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fcNMX3WXH.jpg", cAlternateFileName="FCNMX3~1.JPG")) returned 1 [0271.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\fcNMX3WXH.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\fcnmx3wxh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0271.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0271.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.255] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.255] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.255] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.255] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.256] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0271.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0271.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0271.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0271.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.261] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1560, lpOverlapped=0x0) returned 1 [0271.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeaa0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1560, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1560, lpOverlapped=0x0) returned 1 [0271.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.263] CloseHandle (hObject=0x1f0) returned 1 [0271.264] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.264] SetEndOfFile (hFile=0x1e0) returned 1 [0271.264] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\fcNMX3WXH.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\fcnmx3wxh.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\fcNMX3WXH.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\fcnmx3wxh.jpg.vhd")) returned 1 [0271.265] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f06abb0, ftCreationTime.dwHighDateTime=0x1d5ea2a, ftLastAccessTime.dwLowDateTime=0xfa8006e0, ftLastAccessTime.dwHighDateTime=0x1d5e379, ftLastWriteTime.dwLowDateTime=0xfa8006e0, ftLastWriteTime.dwHighDateTime=0x1d5e379, nFileSizeHigh=0x0, nFileSizeLow=0x230c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fWv0xL9MUm.gif", cAlternateFileName="FWV0XL~1.GIF")) returned 1 [0271.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\fWv0xL9MUm.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\fwv0xl9mum.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.267] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.268] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.269] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.270] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.271] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.272] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.273] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.279] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.280] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.280] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0271.280] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0271.280] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.280] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0271.280] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.280] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.280] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0271.280] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.280] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.281] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0271.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.281] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0271.281] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.281] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0271.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0271.282] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.282] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.282] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.283] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.283] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.283] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x30c, lpOverlapped=0x0) returned 1 [0271.283] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffcf4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x310, lpOverlapped=0x0) returned 1 [0271.284] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.284] CloseHandle (hObject=0x1f0) returned 1 [0271.284] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.284] SetEndOfFile (hFile=0x1e0) returned 1 [0271.285] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\fWv0xL9MUm.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\fwv0xl9mum.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\fWv0xL9MUm.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\fwv0xl9mum.gif.vhd")) returned 1 [0271.285] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e861c0, ftCreationTime.dwHighDateTime=0x1d5edd6, ftLastAccessTime.dwLowDateTime=0xe49aa740, ftLastAccessTime.dwHighDateTime=0x1d5e52c, ftLastWriteTime.dwLowDateTime=0xe49aa740, ftLastWriteTime.dwHighDateTime=0x1d5e52c, nFileSizeHigh=0x0, nFileSizeLow=0x15d82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FxBU9J1BFuHkFLavD.rtf", cAlternateFileName="FXBU9J~1.RTF")) returned 1 [0271.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FxBU9J1BFuHkFLavD.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\fxbu9j1bfuhkflavd.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.286] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.286] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0271.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0271.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0271.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0271.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.297] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.297] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0271.297] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.298] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0271.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.298] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0271.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0271.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.301] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.301] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.301] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.301] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.302] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.302] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.303] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.303] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.304] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.304] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.304] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.306] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.306] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.306] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.307] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.307] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.307] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.308] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.308] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1d82, lpOverlapped=0x0) returned 1 [0271.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe27e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d90, lpOverlapped=0x0) returned 1 [0271.309] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.310] CloseHandle (hObject=0x1f0) returned 1 [0271.310] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.310] SetEndOfFile (hFile=0x1e0) returned 1 [0271.311] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\FxBU9J1BFuHkFLavD.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\fxbu9j1bfuhkflavd.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\FxBU9J1BFuHkFLavD.rtf.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\fxbu9j1bfuhkflavd.rtf.vhd")) returned 1 [0271.312] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfbd250, ftCreationTime.dwHighDateTime=0x1d5e4f6, ftLastAccessTime.dwLowDateTime=0x645eee10, ftLastAccessTime.dwHighDateTime=0x1d5e8e7, ftLastWriteTime.dwLowDateTime=0x645eee10, ftLastWriteTime.dwHighDateTime=0x1d5e8e7, nFileSizeHigh=0x0, nFileSizeLow=0x2133, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GpzhQqLzs1.avi", cAlternateFileName="GPZHQQ~1.AVI")) returned 1 [0271.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GpzhQqLzs1.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\gpzhqqlzs1.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.312] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.312] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.320] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.321] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99368 [0271.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99368 | out: hHeap=0x2750000) returned 1 [0271.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.324] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.324] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.324] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.324] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.324] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.324] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.324] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0271.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.325] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0271.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.325] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0271.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0271.327] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.327] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x133, lpOverlapped=0x0) returned 1 [0271.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffecd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x140, lpOverlapped=0x0) returned 1 [0271.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.329] CloseHandle (hObject=0x1f0) returned 1 [0271.330] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.330] SetEndOfFile (hFile=0x1e0) returned 1 [0271.330] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\GpzhQqLzs1.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\gpzhqqlzs1.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\GpzhQqLzs1.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\gpzhqqlzs1.avi.vhd")) returned 1 [0271.331] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74123040, ftCreationTime.dwHighDateTime=0x1d5e150, ftLastAccessTime.dwLowDateTime=0x8dc1a110, ftLastAccessTime.dwHighDateTime=0x1d5e7bd, ftLastWriteTime.dwLowDateTime=0x8dc1a110, ftLastWriteTime.dwHighDateTime=0x1d5e7bd, nFileSizeHigh=0x0, nFileSizeLow=0x22ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="h6Mq_sgR.png", cAlternateFileName="")) returned 1 [0271.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\h6Mq_sgR.png" (normalized: "c:\\users\\fd1hvy\\desktop\\h6mq_sgr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0271.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0271.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.346] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0271.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0271.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0271.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0271.348] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.348] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2ec, lpOverlapped=0x0) returned 1 [0271.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd14, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2f0, lpOverlapped=0x0) returned 1 [0271.350] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.351] CloseHandle (hObject=0x1f0) returned 1 [0271.351] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.351] SetEndOfFile (hFile=0x1e0) returned 1 [0271.352] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\h6Mq_sgR.png" (normalized: "c:\\users\\fd1hvy\\desktop\\h6mq_sgr.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\h6Mq_sgR.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\h6mq_sgr.png.vhd")) returned 1 [0271.352] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa218de04, ftCreationTime.dwHighDateTime=0x1d6669a, ftLastAccessTime.dwLowDateTime=0xa218de04, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xa3846f40, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HowToDecrypt.txt", cAlternateFileName="HOWTOD~1.TXT")) returned 1 [0271.353] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2153a010, ftCreationTime.dwHighDateTime=0x1d5e18b, ftLastAccessTime.dwLowDateTime=0xc1ad3e50, ftLastAccessTime.dwHighDateTime=0x1d5e7de, ftLastWriteTime.dwLowDateTime=0xc1ad3e50, ftLastWriteTime.dwHighDateTime=0x1d5e7de, nFileSizeHigh=0x0, nFileSizeLow=0xd8f9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hyi-bnAFaeH-Vr7yV.png", cAlternateFileName="HYI-BN~1.PNG")) returned 1 [0271.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\hyi-bnAFaeH-Vr7yV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\hyi-bnafaeh-vr7yv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.366] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0271.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0271.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0271.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0271.367] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.367] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.368] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0271.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.368] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0271.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.368] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0271.369] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0271.370] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.370] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18f9, lpOverlapped=0x0) returned 1 [0271.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe707, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1900, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1900, lpOverlapped=0x0) returned 1 [0271.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.376] CloseHandle (hObject=0x1f0) returned 1 [0271.376] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.376] SetEndOfFile (hFile=0x1e0) returned 1 [0271.377] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\hyi-bnAFaeH-Vr7yV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\hyi-bnafaeh-vr7yv.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\hyi-bnAFaeH-Vr7yV.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\hyi-bnafaeh-vr7yv.png.vhd")) returned 1 [0271.378] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60729b0, ftCreationTime.dwHighDateTime=0x1d5e6a6, ftLastAccessTime.dwLowDateTime=0xa58a07c0, ftLastAccessTime.dwHighDateTime=0x1d5ee3d, ftLastWriteTime.dwLowDateTime=0xa58a07c0, ftLastWriteTime.dwHighDateTime=0x1d5ee3d, nFileSizeHigh=0x0, nFileSizeLow=0x7fa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Jt8YX_7zaq9I2CklDqXG.gif", cAlternateFileName="JT8YX_~1.GIF")) returned 1 [0271.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Jt8YX_7zaq9I2CklDqXG.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\jt8yx_7zaq9i2ckldqxg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.383] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.384] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.385] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.386] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0271.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0271.425] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0271.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0271.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.427] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0271.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0271.427] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0271.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0271.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.430] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1fa9, lpOverlapped=0x0) returned 1 [0271.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe057, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1fb0, lpOverlapped=0x0) returned 1 [0271.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.434] CloseHandle (hObject=0x1f0) returned 1 [0271.434] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.434] SetEndOfFile (hFile=0x1e0) returned 1 [0271.435] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Jt8YX_7zaq9I2CklDqXG.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\jt8yx_7zaq9i2ckldqxg.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Jt8YX_7zaq9I2CklDqXG.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\jt8yx_7zaq9i2ckldqxg.gif.vhd")) returned 1 [0271.436] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df3adc0, ftCreationTime.dwHighDateTime=0x1d5e990, ftLastAccessTime.dwLowDateTime=0x94115790, ftLastAccessTime.dwHighDateTime=0x1d5e98e, ftLastWriteTime.dwLowDateTime=0x94115790, ftLastWriteTime.dwHighDateTime=0x1d5e98e, nFileSizeHigh=0x0, nFileSizeLow=0x109cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JyEuagNggLeJH.png", cAlternateFileName="JYEUAG~1.PNG")) returned 1 [0271.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JyEuagNggLeJH.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jyeuagngglejh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.437] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.437] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.443] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.444] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.445] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0271.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0271.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0271.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0271.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.453] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0271.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0271.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.454] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0271.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0271.455] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.455] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.456] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.458] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.459] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x9cc, lpOverlapped=0x0) returned 1 [0271.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff634, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x9d0, lpOverlapped=0x0) returned 1 [0271.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.463] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.464] CloseHandle (hObject=0x1f0) returned 1 [0271.464] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.464] SetEndOfFile (hFile=0x1e0) returned 1 [0271.465] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JyEuagNggLeJH.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jyeuagngglejh.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JyEuagNggLeJH.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\jyeuagngglejh.png.vhd")) returned 1 [0271.466] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x617d9d00, ftCreationTime.dwHighDateTime=0x1d5ec3d, ftLastAccessTime.dwLowDateTime=0x27cb07f0, ftLastAccessTime.dwHighDateTime=0x1d5e19d, ftLastWriteTime.dwLowDateTime=0x27cb07f0, ftLastWriteTime.dwHighDateTime=0x1d5e19d, nFileSizeHigh=0x0, nFileSizeLow=0xe203, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ktz_4T9Y.flv", cAlternateFileName="")) returned 1 [0271.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ktz_4T9Y.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\ktz_4t9y.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.486] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.487] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.488] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.489] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.490] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0271.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0271.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0271.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0271.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.497] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0271.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.498] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0271.498] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.499] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0271.499] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0271.500] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.500] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.500] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.501] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.501] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.501] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.502] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.502] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.503] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.504] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x203, lpOverlapped=0x0) returned 1 [0271.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffdfd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x210, lpOverlapped=0x0) returned 1 [0271.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.507] CloseHandle (hObject=0x1f0) returned 1 [0271.507] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.508] SetEndOfFile (hFile=0x1e0) returned 1 [0271.508] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ktz_4T9Y.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\ktz_4t9y.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ktz_4T9Y.flv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\ktz_4t9y.flv.vhd")) returned 1 [0271.509] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c98bc00, ftCreationTime.dwHighDateTime=0x1d5f0bf, ftLastAccessTime.dwLowDateTime=0x59f2ec30, ftLastAccessTime.dwHighDateTime=0x1d5e9c1, ftLastWriteTime.dwLowDateTime=0x59f2ec30, ftLastWriteTime.dwHighDateTime=0x1d5e9c1, nFileSizeHigh=0x0, nFileSizeLow=0xa05, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m49AC okLaCSGCy HGn.pdf", cAlternateFileName="M49ACO~1.PDF")) returned 1 [0271.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\m49AC okLaCSGCy HGn.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\m49ac oklacsgcy hgn.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.523] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.524] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.525] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.526] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.526] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.527] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.527] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0271.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0271.527] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.527] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0271.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.528] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.528] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0271.528] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.528] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.528] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f48 [0271.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.529] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0271.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.576] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0271.577] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f48 | out: hHeap=0x2750000) returned 1 [0271.578] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa05, lpOverlapped=0x0) returned 1 [0271.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff5fb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xa10, lpOverlapped=0x0) returned 1 [0271.579] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.580] CloseHandle (hObject=0x1f0) returned 1 [0271.580] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.580] SetEndOfFile (hFile=0x1e0) returned 1 [0271.581] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\m49AC okLaCSGCy HGn.pdf" (normalized: "c:\\users\\fd1hvy\\desktop\\m49ac oklacsgcy hgn.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\m49AC okLaCSGCy HGn.pdf.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\m49ac oklacsgcy hgn.pdf.vhd")) returned 1 [0271.582] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc95f7830, ftCreationTime.dwHighDateTime=0x1d5ebb6, ftLastAccessTime.dwLowDateTime=0x9714b740, ftLastAccessTime.dwHighDateTime=0x1d5e743, ftLastWriteTime.dwLowDateTime=0x9714b740, ftLastWriteTime.dwHighDateTime=0x1d5e743, nFileSizeHigh=0x0, nFileSizeLow=0x17f56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m_T_d SCRowBXQL.bmp", cAlternateFileName="M_T_DS~1.BMP")) returned 1 [0271.582] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\m_T_d SCRowBXQL.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\m_t_d scrowbxql.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0271.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.717] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0271.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0271.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0271.721] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0271.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0271.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0271.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0271.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0271.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.801] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0271.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0271.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0271.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0271.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0271.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0271.802] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0271.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0271.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0271.803] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0271.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0271.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0271.868] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1f56, lpOverlapped=0x0) returned 1 [0271.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe0aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0271.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f60, lpOverlapped=0x0) returned 1 [0271.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0271.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0271.936] CloseHandle (hObject=0x1f0) returned 1 [0271.936] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0271.936] SetEndOfFile (hFile=0x1e0) returned 1 [0271.937] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\m_T_d SCRowBXQL.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\m_t_d scrowbxql.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\m_T_d SCRowBXQL.bmp.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\m_t_d scrowbxql.bmp.vhd")) returned 1 [0271.939] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5730830, ftCreationTime.dwHighDateTime=0x1d5ed9e, ftLastAccessTime.dwLowDateTime=0x9c608e10, ftLastAccessTime.dwHighDateTime=0x1d5eec1, ftLastWriteTime.dwLowDateTime=0x9c608e10, ftLastWriteTime.dwHighDateTime=0x1d5eec1, nFileSizeHigh=0x0, nFileSizeLow=0xf952, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nc5zdxl91xXO6 l.pps", cAlternateFileName="NC5ZDX~1.PPS")) returned 1 [0272.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nc5zdxl91xXO6 l.pps" (normalized: "c:\\users\\fd1hvy\\desktop\\nc5zdxl91xxo6 l.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.052] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.053] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.054] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.055] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.056] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.057] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.058] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.059] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.060] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.061] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.062] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.063] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.063] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.064] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.064] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0272.065] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0272.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.065] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0272.065] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.065] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.065] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0272.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.066] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.066] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0272.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.066] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0272.067] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.067] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0272.068] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0272.068] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.068] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.068] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.068] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.069] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1952, lpOverlapped=0x0) returned 1 [0272.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe6ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1960, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1960, lpOverlapped=0x0) returned 1 [0272.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.139] CloseHandle (hObject=0x1f0) returned 1 [0272.139] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.139] SetEndOfFile (hFile=0x1e0) returned 1 [0272.140] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\nc5zdxl91xXO6 l.pps" (normalized: "c:\\users\\fd1hvy\\desktop\\nc5zdxl91xxo6 l.pps"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\nc5zdxl91xXO6 l.pps.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\nc5zdxl91xxo6 l.pps.vhd")) returned 1 [0272.141] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x859fa3d0, ftCreationTime.dwHighDateTime=0x1d5e9d7, ftLastAccessTime.dwLowDateTime=0x890da6b0, ftLastAccessTime.dwHighDateTime=0x1d5e1ae, ftLastWriteTime.dwLowDateTime=0x890da6b0, ftLastWriteTime.dwHighDateTime=0x1d5e1ae, nFileSizeHigh=0x0, nFileSizeLow=0x182c7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NVdFsfn2UH.csv", cAlternateFileName="NVDFSF~1.CSV")) returned 1 [0272.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\NVdFsfn2UH.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\nvdfsfn2uh.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.152] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0272.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0272.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0272.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0272.153] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.153] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.154] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0272.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0272.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.201] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0272.203] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0272.203] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.203] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.203] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.203] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.204] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.204] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.205] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.205] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.206] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.206] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.207] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.207] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.208] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2c7, lpOverlapped=0x0) returned 1 [0272.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd39, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.209] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2d0, lpOverlapped=0x0) returned 1 [0272.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.210] CloseHandle (hObject=0x1f0) returned 1 [0272.210] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.210] SetEndOfFile (hFile=0x1e0) returned 1 [0272.211] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\NVdFsfn2UH.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\nvdfsfn2uh.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\NVdFsfn2UH.csv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\nvdfsfn2uh.csv.vhd")) returned 1 [0272.212] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64616f10, ftCreationTime.dwHighDateTime=0x1d5eaa8, ftLastAccessTime.dwLowDateTime=0x4b979130, ftLastAccessTime.dwHighDateTime=0x1d5f04d, ftLastWriteTime.dwLowDateTime=0x4b979130, ftLastWriteTime.dwHighDateTime=0x1d5f04d, nFileSizeHigh=0x0, nFileSizeLow=0x127fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="okKhM uCDP8VRpfHk97M.avi", cAlternateFileName="OKKHMU~1.AVI")) returned 1 [0272.212] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\okKhM uCDP8VRpfHk97M.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\okkhm ucdp8vrpfhk97m.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.213] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.259] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0272.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0272.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0272.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0272.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.260] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0272.260] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.261] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0272.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.261] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0272.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0272.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x7fe, lpOverlapped=0x0) returned 1 [0272.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff802, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x800, lpOverlapped=0x0) returned 1 [0272.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.270] CloseHandle (hObject=0x1f0) returned 1 [0272.270] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.270] SetEndOfFile (hFile=0x1e0) returned 1 [0272.270] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\okKhM uCDP8VRpfHk97M.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\okkhm ucdp8vrpfhk97m.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\okKhM uCDP8VRpfHk97M.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\okkhm ucdp8vrpfhk97m.avi.vhd")) returned 1 [0272.271] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11b5a250, ftCreationTime.dwHighDateTime=0x1d5edfe, ftLastAccessTime.dwLowDateTime=0x7aab2550, ftLastAccessTime.dwHighDateTime=0x1d5e11f, ftLastWriteTime.dwLowDateTime=0x7aab2550, ftLastWriteTime.dwHighDateTime=0x1d5e11f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="plG1IjUjMlNcrBMEJ7r.rtf", cAlternateFileName="PLG1IJ~1.RTF")) returned 1 [0272.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\plG1IjUjMlNcrBMEJ7r.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\plg1ijujmlncrbmej7r.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.274] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.275] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.276] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.277] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.278] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.279] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99100 [0272.330] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99100 | out: hHeap=0x2750000) returned 1 [0272.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0272.330] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0272.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.331] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0272.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0272.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0272.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0272.333] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.333] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbf2, lpOverlapped=0x0) returned 1 [0272.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff40e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc00, lpOverlapped=0x0) returned 1 [0272.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.336] CloseHandle (hObject=0x1f0) returned 1 [0272.336] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.336] SetEndOfFile (hFile=0x1e0) returned 1 [0272.337] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\plG1IjUjMlNcrBMEJ7r.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\plg1ijujmlncrbmej7r.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\plG1IjUjMlNcrBMEJ7r.rtf.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\plg1ijujmlncrbmej7r.rtf.vhd")) returned 1 [0272.338] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1539ea40, ftCreationTime.dwHighDateTime=0x1d5eb91, ftLastAccessTime.dwLowDateTime=0xf12e0dc0, ftLastAccessTime.dwHighDateTime=0x1d5ea78, ftLastWriteTime.dwLowDateTime=0xf12e0dc0, ftLastWriteTime.dwHighDateTime=0x1d5ea78, nFileSizeHigh=0x0, nFileSizeLow=0xcce0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RcQj3TSMVU-Gu.png", cAlternateFileName="RCQJ3T~1.PNG")) returned 1 [0272.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\RcQj3TSMVU-Gu.png" (normalized: "c:\\users\\fd1hvy\\desktop\\rcqj3tsmvu-gu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.351] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0272.351] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0272.352] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.352] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0272.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0272.352] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.352] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.353] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0272.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.353] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0272.353] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.353] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0272.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0272.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xce0, lpOverlapped=0x0) returned 1 [0272.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff320, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xce0, lpOverlapped=0x0) returned 1 [0272.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.363] CloseHandle (hObject=0x1f0) returned 1 [0272.363] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.363] SetEndOfFile (hFile=0x1e0) returned 1 [0272.364] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\RcQj3TSMVU-Gu.png" (normalized: "c:\\users\\fd1hvy\\desktop\\rcqj3tsmvu-gu.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\RcQj3TSMVU-Gu.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\rcqj3tsmvu-gu.png.vhd")) returned 1 [0272.365] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c176a0, ftCreationTime.dwHighDateTime=0x1d5e6c7, ftLastAccessTime.dwLowDateTime=0x11602830, ftLastAccessTime.dwHighDateTime=0x1d5ed62, ftLastWriteTime.dwLowDateTime=0x11602830, ftLastWriteTime.dwHighDateTime=0x1d5ed62, nFileSizeHigh=0x0, nFileSizeLow=0x12a65, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rim7Vl6BPsw.png", cAlternateFileName="RIM7VL~1.PNG")) returned 1 [0272.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Rim7Vl6BPsw.png" (normalized: "c:\\users\\fd1hvy\\desktop\\rim7vl6bpsw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.423] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.424] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.425] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.426] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.427] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.427] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0272.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0272.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.428] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0272.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.428] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0272.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.429] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.429] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0272.429] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.430] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0272.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.430] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0272.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0272.431] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.431] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.434] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.434] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa65, lpOverlapped=0x0) returned 1 [0272.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff59b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xa70, lpOverlapped=0x0) returned 1 [0272.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.473] CloseHandle (hObject=0x1f0) returned 1 [0272.473] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.473] SetEndOfFile (hFile=0x1e0) returned 1 [0272.473] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Rim7Vl6BPsw.png" (normalized: "c:\\users\\fd1hvy\\desktop\\rim7vl6bpsw.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Rim7Vl6BPsw.png.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\rim7vl6bpsw.png.vhd")) returned 1 [0272.474] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7a4270, ftCreationTime.dwHighDateTime=0x1d5e63c, ftLastAccessTime.dwLowDateTime=0xe03c6f10, ftLastAccessTime.dwHighDateTime=0x1d5ecf4, ftLastWriteTime.dwLowDateTime=0xe03c6f10, ftLastWriteTime.dwHighDateTime=0x1d5ecf4, nFileSizeHigh=0x0, nFileSizeLow=0x1748e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RQIY0.odt", cAlternateFileName="")) returned 1 [0272.474] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\RQIY0.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\rqiy0.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.485] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.485] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.485] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.485] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0272.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0272.486] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.486] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0272.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0272.486] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.487] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0272.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0272.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0272.488] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0272.488] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.489] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.489] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.489] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.495] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.497] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.497] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x148e, lpOverlapped=0x0) returned 1 [0272.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffeb72, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1490, lpOverlapped=0x0) returned 1 [0272.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.547] CloseHandle (hObject=0x1f0) returned 1 [0272.547] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.547] SetEndOfFile (hFile=0x1e0) returned 1 [0272.547] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\RQIY0.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\rqiy0.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\RQIY0.odt.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\rqiy0.odt.vhd")) returned 1 [0272.549] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2311ad40, ftCreationTime.dwHighDateTime=0x1d5e73d, ftLastAccessTime.dwLowDateTime=0x6789edf0, ftLastAccessTime.dwHighDateTime=0x1d5ef37, ftLastWriteTime.dwLowDateTime=0x6789edf0, ftLastWriteTime.dwHighDateTime=0x1d5ef37, nFileSizeHigh=0x0, nFileSizeLow=0xebb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S0gKj4JtuL1wylzyOR.m4a", cAlternateFileName="S0GKJ4~1.M4A")) returned 1 [0272.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\S0gKj4JtuL1wylzyOR.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\s0gkj4jtul1wylzyor.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.557] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.558] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.559] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.560] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.561] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.562] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.562] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.562] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.562] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0272.562] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0272.562] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.563] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0272.563] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.563] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.563] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0272.563] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.563] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.563] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.563] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0272.564] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.564] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0272.564] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.564] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0272.565] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0272.565] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.566] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.566] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xebb, lpOverlapped=0x0) returned 1 [0272.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff145, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xec0, lpOverlapped=0x0) returned 1 [0272.567] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.567] CloseHandle (hObject=0x1f0) returned 1 [0272.568] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.568] SetEndOfFile (hFile=0x1e0) returned 1 [0272.568] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\S0gKj4JtuL1wylzyOR.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\s0gkj4jtul1wylzyor.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\S0gKj4JtuL1wylzyOR.m4a.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\s0gkj4jtul1wylzyor.m4a.vhd")) returned 1 [0272.569] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657d51d0, ftCreationTime.dwHighDateTime=0x1d5e8a4, ftLastAccessTime.dwLowDateTime=0x3d9d8450, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x3d9d8450, ftLastWriteTime.dwHighDateTime=0x1d5e336, nFileSizeHigh=0x0, nFileSizeLow=0x128f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vadaWPgdPIPOYOg.avi", cAlternateFileName="VADAWP~1.AVI")) returned 1 [0272.569] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vadaWPgdPIPOYOg.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\vadawpgdpipoyog.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0272.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0272.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0272.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0272.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc995d0 [0272.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc995d0 | out: hHeap=0x2750000) returned 1 [0272.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0272.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0272.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0272.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.580] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0272.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0272.581] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0272.581] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0272.581] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0272.581] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0272.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0272.582] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0272.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0272.583] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0272.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.583] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.584] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.584] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.586] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.586] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.587] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.588] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.588] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0272.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.589] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0272.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x8f6, lpOverlapped=0x0) returned 1 [0272.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff70a, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0272.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x900, lpOverlapped=0x0) returned 1 [0272.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0272.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0272.591] CloseHandle (hObject=0x1f0) returned 1 [0272.591] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0272.591] SetEndOfFile (hFile=0x1e0) returned 1 [0272.779] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\vadaWPgdPIPOYOg.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\vadawpgdpipoyog.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\vadaWPgdPIPOYOg.avi.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\vadawpgdpipoyog.avi.vhd")) returned 1 [0272.865] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc15a6150, ftCreationTime.dwHighDateTime=0x1d5e165, ftLastAccessTime.dwLowDateTime=0x1c621410, ftLastAccessTime.dwHighDateTime=0x1d5e41a, ftLastWriteTime.dwLowDateTime=0x1c621410, ftLastWriteTime.dwHighDateTime=0x1d5e41a, nFileSizeHigh=0x0, nFileSizeLow=0x7807, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Vi2RTa-2H.pptx", cAlternateFileName="VI2RTA~1.PPT")) returned 1 [0272.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vi2RTa-2H.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\vi2rta-2h.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0273.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0273.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0273.280] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0273.509] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0273.509] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0273.509] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0273.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0273.578] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0273.578] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0273.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0273.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0273.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0273.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0273.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0273.579] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0273.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0273.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0273.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0273.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0273.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0273.581] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0273.581] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0273.581] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0273.582] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0273.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0273.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0274.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0274.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0274.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0274.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0274.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0274.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1807, lpOverlapped=0x0) returned 1 [0274.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe7f9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0274.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1810, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1810, lpOverlapped=0x0) returned 1 [0274.438] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0274.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0274.537] CloseHandle (hObject=0x1f0) returned 1 [0274.742] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0274.942] SetEndOfFile (hFile=0x1e0) returned 1 [0274.954] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Vi2RTa-2H.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\vi2rta-2h.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Vi2RTa-2H.pptx.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\vi2rta-2h.pptx.vhd")) returned 1 [0275.009] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0233f0, ftCreationTime.dwHighDateTime=0x1d5ef78, ftLastAccessTime.dwLowDateTime=0xa1b41a40, ftLastAccessTime.dwHighDateTime=0x1d5e3ad, ftLastWriteTime.dwLowDateTime=0xa1b41a40, ftLastWriteTime.dwHighDateTime=0x1d5e3ad, nFileSizeHigh=0x0, nFileSizeLow=0xa143, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WDhU6Dxerl.docx", cAlternateFileName="WDHU6D~1.DOC")) returned 1 [0275.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WDhU6Dxerl.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\wdhu6dxerl.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0275.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0275.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.172] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.173] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0275.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0275.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0275.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0275.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0275.229] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0275.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.229] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0275.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0275.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0275.230] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.230] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0275.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0275.230] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0275.231] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0275.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0275.231] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0275.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0275.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0275.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0275.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x143, lpOverlapped=0x0) returned 1 [0275.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffebd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x150, lpOverlapped=0x0) returned 1 [0275.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0275.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0275.418] CloseHandle (hObject=0x1f0) returned 1 [0275.454] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.454] SetEndOfFile (hFile=0x1e0) returned 1 [0275.626] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\WDhU6Dxerl.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\wdhu6dxerl.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\WDhU6Dxerl.docx.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\wdhu6dxerl.docx.vhd")) returned 1 [0275.633] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ab6d2d0, ftCreationTime.dwHighDateTime=0x1d5f104, ftLastAccessTime.dwLowDateTime=0x44e0ce0, ftLastAccessTime.dwHighDateTime=0x1d5e7f7, ftLastWriteTime.dwLowDateTime=0x44e0ce0, ftLastWriteTime.dwHighDateTime=0x1d5e7f7, nFileSizeHigh=0x0, nFileSizeLow=0x1228a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WI9pngBkFv.flv", cAlternateFileName="WI9PNG~1.FLV")) returned 1 [0275.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WI9pngBkFv.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\wi9pngbkfv.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0275.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0275.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0275.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0275.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99628 [0275.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99628 | out: hHeap=0x2750000) returned 1 [0275.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0275.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0275.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0275.726] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0275.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0275.727] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.727] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0275.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0275.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0275.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0275.727] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0275.727] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0275.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0275.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0275.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0275.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x28a, lpOverlapped=0x0) returned 1 [0275.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd76, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x290, lpOverlapped=0x0) returned 1 [0275.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0275.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0275.743] CloseHandle (hObject=0x1f0) returned 1 [0275.759] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.759] SetEndOfFile (hFile=0x1e0) returned 1 [0275.783] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\WI9pngBkFv.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\wi9pngbkfv.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\WI9pngBkFv.flv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\wi9pngbkfv.flv.vhd")) returned 1 [0275.953] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d5df0, ftCreationTime.dwHighDateTime=0x1d5ed54, ftLastAccessTime.dwLowDateTime=0x5045ff30, ftLastAccessTime.dwHighDateTime=0x1d5e9d8, ftLastWriteTime.dwLowDateTime=0x5045ff30, ftLastWriteTime.dwHighDateTime=0x1d5e9d8, nFileSizeHigh=0x0, nFileSizeLow=0x11049, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wMq-WA4-iJ.flv", cAlternateFileName="WMQ-WA~1.FLV")) returned 1 [0275.953] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wMq-WA4-iJ.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\wmq-wa4-ij.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0275.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0275.955] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.956] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.957] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.958] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.959] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.960] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.961] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.962] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.963] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.966] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0275.966] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0275.967] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0275.967] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99418 [0275.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99418 | out: hHeap=0x2750000) returned 1 [0275.967] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0275.967] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0275.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0275.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0275.967] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0275.967] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.967] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0275.968] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0275.968] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0275.968] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0275.968] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0275.968] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0275.969] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0275.969] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0275.969] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0275.969] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0275.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0275.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0275.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1049, lpOverlapped=0x0) returned 1 [0275.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffefb7, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0275.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1050, lpOverlapped=0x0) returned 1 [0275.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0275.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0275.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0275.976] CloseHandle (hObject=0x1f0) returned 1 [0276.015] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.015] SetEndOfFile (hFile=0x1e0) returned 1 [0276.056] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\wMq-WA4-iJ.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\wmq-wa4-ij.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\wMq-WA4-iJ.flv.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\wmq-wa4-ij.flv.vhd")) returned 1 [0276.235] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1163760, ftCreationTime.dwHighDateTime=0x1d5e580, ftLastAccessTime.dwLowDateTime=0xdc8e7a40, ftLastAccessTime.dwHighDateTime=0x1d5eadb, ftLastWriteTime.dwLowDateTime=0xdc8e7a40, ftLastWriteTime.dwHighDateTime=0x1d5eadb, nFileSizeHigh=0x0, nFileSizeLow=0x9b08, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xw152qDQN6JhPgfybX8.jpg", cAlternateFileName="XW152Q~1.JPG")) returned 1 [0276.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Xw152qDQN6JhPgfybX8.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\xw152qdqn6jhpgfybx8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0276.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0276.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0276.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99100 [0276.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99100 | out: hHeap=0x2750000) returned 1 [0276.396] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0276.396] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0276.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0276.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0276.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0276.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.397] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0276.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0276.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0276.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0276.398] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0276.398] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0276.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0276.399] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0276.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0276.399] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.449] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1b08, lpOverlapped=0x0) returned 1 [0276.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe4f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1b10, lpOverlapped=0x0) returned 1 [0276.450] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0276.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0276.470] CloseHandle (hObject=0x1f0) returned 1 [0276.488] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.488] SetEndOfFile (hFile=0x1e0) returned 1 [0276.520] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Xw152qDQN6JhPgfybX8.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\xw152qdqn6jhpgfybx8.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Xw152qDQN6JhPgfybX8.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\xw152qdqn6jhpgfybx8.jpg.vhd")) returned 1 [0276.530] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360136b0, ftCreationTime.dwHighDateTime=0x1d5e912, ftLastAccessTime.dwLowDateTime=0x45159800, ftLastAccessTime.dwHighDateTime=0x1d5ee38, ftLastWriteTime.dwLowDateTime=0x45159800, ftLastWriteTime.dwHighDateTime=0x1d5ee38, nFileSizeHigh=0x0, nFileSizeLow=0xa54e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xzwF4Z-f.jpg", cAlternateFileName="")) returned 1 [0276.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xzwF4Z-f.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\xzwf4z-f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0276.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0276.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0276.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0276.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0276.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0276.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0276.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984b0 [0276.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0276.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984b0 | out: hHeap=0x2750000) returned 1 [0276.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0276.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.549] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0276.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0276.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0276.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0276.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0276.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0276.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0276.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0276.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0276.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x54e, lpOverlapped=0x0) returned 1 [0276.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffab2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x550, lpOverlapped=0x0) returned 1 [0276.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0276.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0276.561] CloseHandle (hObject=0x1f0) returned 1 [0276.562] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.563] SetEndOfFile (hFile=0x1e0) returned 1 [0276.633] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\xzwF4Z-f.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\xzwf4z-f.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\xzwF4Z-f.jpg.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\xzwf4z-f.jpg.vhd")) returned 1 [0276.661] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754d8ab0, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0x2b958780, ftLastAccessTime.dwHighDateTime=0x1d5e7be, ftLastWriteTime.dwLowDateTime=0x2b958780, ftLastWriteTime.dwHighDateTime=0x1d5e7be, nFileSizeHigh=0x0, nFileSizeLow=0x17c17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXCd5IDV6Mt-.mp3", cAlternateFileName="ZXCD5I~1.MP3")) returned 1 [0276.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zXCd5IDV6Mt-.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\zxcd5idv6mt-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0276.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0276.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.809] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.810] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.811] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.812] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.813] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.814] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.815] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0276.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0276.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0276.818] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0276.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0276.833] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0276.833] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98600 [0276.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0276.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98600 | out: hHeap=0x2750000) returned 1 [0276.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0276.861] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.861] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0276.861] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0276.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0276.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0276.877] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0276.877] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0276.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0276.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0276.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0276.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0276.879] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0276.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0276.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1c17, lpOverlapped=0x0) returned 1 [0276.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe3e9, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0276.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1c20, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1c20, lpOverlapped=0x0) returned 1 [0276.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0276.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0276.974] CloseHandle (hObject=0x1f0) returned 1 [0276.988] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0276.988] SetEndOfFile (hFile=0x1e0) returned 1 [0277.078] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\zXCd5IDV6Mt-.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\zxcd5idv6mt-.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\zXCd5IDV6Mt-.mp3.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\zxcd5idv6mt-.mp3.vhd")) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4330e0, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0xebc8d100, ftLastAccessTime.dwHighDateTime=0x1d5e5b7, ftLastWriteTime.dwLowDateTime=0xebc8d100, ftLastWriteTime.dwHighDateTime=0x1d5e5b7, nFileSizeHigh=0x0, nFileSizeLow=0x17642, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_QnWnSedyWp.gif", cAlternateFileName="_QNWNS~1.GIF")) returned 1 [0277.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_QnWnSedyWp.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\_qnwnsedywp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0277.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.082] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.086] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.087] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.088] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.089] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0277.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0277.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0277.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0277.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0277.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98550 [0277.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0277.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0277.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98550 | out: hHeap=0x2750000) returned 1 [0277.090] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0277.090] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0277.091] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0277.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0277.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0277.091] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0277.091] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0277.091] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0277.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0277.092] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0277.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0277.092] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0277.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0277.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0277.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1642, lpOverlapped=0x0) returned 1 [0277.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe9be, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1650, lpOverlapped=0x0) returned 1 [0277.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0277.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0277.098] CloseHandle (hObject=0x1f0) returned 1 [0277.101] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.102] SetEndOfFile (hFile=0x1e0) returned 1 [0277.141] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\_QnWnSedyWp.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\_qnwnsedywp.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\_QnWnSedyWp.gif.vhd" (normalized: "c:\\users\\fd1hvy\\desktop\\_qnwnsedywp.gif.vhd")) returned 1 [0277.156] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4330e0, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0xebc8d100, ftLastAccessTime.dwHighDateTime=0x1d5e5b7, ftLastWriteTime.dwLowDateTime=0xebc8d100, ftLastWriteTime.dwHighDateTime=0x1d5e5b7, nFileSizeHigh=0x0, nFileSizeLow=0x17642, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_QnWnSedyWp.gif", cAlternateFileName="_QNWNS~1.GIF")) returned 0 [0277.387] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0277.545] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0277.546] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.546] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.546] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0277.546] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0277.546] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0277.547] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.547] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0277.574] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc984b0 [0277.574] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x3c) returned 0xc99fe8 [0277.574] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0277.574] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98570 [0277.574] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x42) returned 0xc93088 [0277.574] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe8fe3a9f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8fe3a9f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0277.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98550 [0277.575] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x40) returned 0xc9a270 [0277.575] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe8fe3a9f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8fe3a9f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0277.575] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0277.575] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0277.576] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.576] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.576] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0277.576] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0277.576] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0277.576] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.576] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.576] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0277.576] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0277.576] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9ec8 [0277.577] FindNextFileW (in: hFindFile=0xbb9ec8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.577] FindNextFileW (in: hFindFile=0xbb9ec8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.577] FindNextFileW (in: hFindFile=0xbb9ec8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0277.577] FindClose (in: hFindFile=0xbb9ec8 | out: hFindFile=0xbb9ec8) returned 1 [0277.577] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba188 [0277.577] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.577] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.577] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0277.578] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0277.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc984c0 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc984c0 | out: hHeap=0x2750000) returned 1 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0277.735] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0277.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0277.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0277.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0277.736] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0277.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0277.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0277.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3c0, lpOverlapped=0x0) returned 1 [0277.819] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc40, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3c0, lpOverlapped=0x0) returned 1 [0277.852] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0277.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0277.853] CloseHandle (hObject=0x1f0) returned 1 [0277.853] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0277.853] SetEndOfFile (hFile=0x1e0) returned 1 [0277.918] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.vhd" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.vhd")) returned 1 [0277.952] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0277.952] FindClose (in: hFindFile=0xbba188 | out: hFindFile=0xbba188) returned 1 [0277.952] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0277.953] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.953] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.953] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0277.953] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0277.953] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0277.957] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.957] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.957] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0277.957] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0277.957] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0277.957] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0277.957] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0277.959] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0277.959] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.959] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0277.981] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0277.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0277.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.004] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0278.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0278.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0278.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0278.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x852, lpOverlapped=0x0) returned 1 [0278.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff7ae, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x860, lpOverlapped=0x0) returned 1 [0278.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.008] CloseHandle (hObject=0x1f0) returned 1 [0278.023] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.023] SetEndOfFile (hFile=0x1e0) returned 1 [0278.077] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk.vhd" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk.vhd")) returned 1 [0278.122] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0278.122] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0278.122] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.122] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.124] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.125] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0278.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98560 [0278.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98560 | out: hHeap=0x2750000) returned 1 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0278.128] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.128] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.128] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0278.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0278.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0278.129] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0278.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.129] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0278.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x91a, lpOverlapped=0x0) returned 1 [0278.130] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6e6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x920, lpOverlapped=0x0) returned 1 [0278.194] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.196] CloseHandle (hObject=0x1f0) returned 1 [0278.200] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.200] SetEndOfFile (hFile=0x1e0) returned 1 [0278.210] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.vhd" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.vhd")) returned 1 [0278.222] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0278.222] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.223] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.224] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.226] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.227] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.228] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.229] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.230] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98978 [0278.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc98af0 [0278.232] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0278.232] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0278.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc985f0 [0278.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc985f0 | out: hHeap=0x2750000) returned 1 [0278.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0278.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.233] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0278.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.233] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0278.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.233] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0278.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0278.234] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc98af0 [0278.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98af0 | out: hHeap=0x2750000) returned 1 [0278.234] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98978 | out: hHeap=0x2750000) returned 1 [0278.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3e7, lpOverlapped=0x0) returned 1 [0278.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc19, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3f0, lpOverlapped=0x0) returned 1 [0278.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.235] CloseHandle (hObject=0x1f0) returned 1 [0278.247] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.247] SetEndOfFile (hFile=0x1e0) returned 1 [0278.279] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.vhd" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.vhd")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0278.284] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0278.284] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0278.336] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.336] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0278.336] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0278.336] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0278.350] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0278.370] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.371] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0278.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc984c0 [0278.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc95600 [0278.371] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0278.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc985f0 [0278.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc95530 [0278.371] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0278.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc984d0 [0278.371] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x36) returned 0xc98198 [0278.371] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0278.371] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0278.372] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0278.372] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.372] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0278.372] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 0 [0278.372] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0278.373] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0278.374] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.374] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98560 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc95738 [0278.374] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98600 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0xc94558 [0278.374] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98810 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x48) returned 0xc92f48 [0278.374] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98790 [0278.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc98978 [0278.374] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0 [0278.374] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0278.375] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0278.377] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.377] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0278.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98710 [0278.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc90a80 [0278.377] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0278.377] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0278.377] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0278.378] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.378] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0278.378] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9a468 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc992b8 [0278.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc992b8 | out: hHeap=0x2750000) returned 1 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a5d0 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98820 [0278.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a5d0 | out: hHeap=0x2750000) returned 1 [0278.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98820 | out: hHeap=0x2750000) returned 1 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.400] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0278.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0278.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0278.401] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.402] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.402] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0278.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2ee, lpOverlapped=0x0) returned 1 [0278.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2f0, lpOverlapped=0x0) returned 1 [0278.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.403] CloseHandle (hObject=0x1f0) returned 1 [0278.403] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.403] SetEndOfFile (hFile=0x1e0) returned 1 [0278.404] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.vhd")) returned 1 [0278.404] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0278.405] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0278.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9a468 [0278.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0278.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0278.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a5d0 [0278.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987f0 [0278.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a5d0 | out: hHeap=0x2750000) returned 1 [0278.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987f0 | out: hHeap=0x2750000) returned 1 [0278.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.422] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0278.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0278.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0278.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0278.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0278.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.457] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.460] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.461] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.462] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.470] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.471] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.474] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.477] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.480] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.480] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.480] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.481] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.495] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.526] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe30, lpOverlapped=0x0) returned 1 [0278.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1d0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe30, lpOverlapped=0x0) returned 1 [0278.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.563] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.564] CloseHandle (hObject=0x1f0) returned 1 [0278.564] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.564] SetEndOfFile (hFile=0x1e0) returned 1 [0278.608] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.vhd" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.vhd")) returned 1 [0278.609] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0278.609] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0278.609] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba248 [0278.613] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.613] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0278.613] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.615] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.615] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.626] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0278.626] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9a468 [0278.626] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0278.626] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0278.626] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a5d0 [0278.626] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98750 [0278.626] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.626] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a5d0 | out: hHeap=0x2750000) returned 1 [0278.626] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98750 | out: hHeap=0x2750000) returned 1 [0278.627] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.627] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.627] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.627] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0278.627] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.627] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0278.627] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.627] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0278.629] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0278.629] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.629] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.629] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0278.629] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.629] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x27e, lpOverlapped=0x0) returned 1 [0278.630] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x280, lpOverlapped=0x0) returned 1 [0278.631] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.633] CloseHandle (hObject=0x1f0) returned 1 [0278.633] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.633] SetEndOfFile (hFile=0x1e0) returned 1 [0278.634] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.vhd")) returned 1 [0278.635] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0278.635] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.635] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.642] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.643] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.644] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.645] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.646] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0278.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9a468 [0278.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0278.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0278.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a5d0 [0278.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98840 [0278.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a5d0 | out: hHeap=0x2750000) returned 1 [0278.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98840 | out: hHeap=0x2750000) returned 1 [0278.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.656] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0278.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0278.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.657] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0278.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0278.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0278.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.669] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.673] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.674] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.676] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.679] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.683] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.691] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.692] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.693] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.694] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.695] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.696] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.699] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.700] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.701] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.702] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.703] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.703] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.704] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.705] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.706] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.709] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.710] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.713] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1080, lpOverlapped=0x0) returned 1 [0278.714] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef80, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1080, lpOverlapped=0x0) returned 1 [0278.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.716] CloseHandle (hObject=0x1f0) returned 1 [0278.716] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.716] SetEndOfFile (hFile=0x1e0) returned 1 [0278.760] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.vhd" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.vhd")) returned 1 [0278.761] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0278.761] FindClose (in: hFindFile=0xbba248 | out: hFindFile=0xbba248) returned 1 [0278.761] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0278.762] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.762] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0278.762] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.771] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.774] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.775] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0278.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9a468 [0278.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0278.786] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0278.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a5d0 [0278.786] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0278.786] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.786] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a5d0 | out: hHeap=0x2750000) returned 1 [0278.786] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0278.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.791] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.791] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0278.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0278.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0278.794] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0278.794] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.794] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.794] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0278.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2ee, lpOverlapped=0x0) returned 1 [0278.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd12, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2f0, lpOverlapped=0x0) returned 1 [0278.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0278.795] CloseHandle (hObject=0x1f0) returned 1 [0278.796] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.796] SetEndOfFile (hFile=0x1e0) returned 1 [0278.813] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.vhd")) returned 1 [0278.815] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0278.815] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0278.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0278.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.829] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.830] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.831] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0278.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0278.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9a468 [0278.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99628 [0278.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99628 | out: hHeap=0x2750000) returned 1 [0278.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a5d0 [0278.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98720 [0278.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.832] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a5d0 | out: hHeap=0x2750000) returned 1 [0278.832] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98720 | out: hHeap=0x2750000) returned 1 [0278.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.832] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.832] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0278.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0278.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9a468 [0278.832] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0278.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.833] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0278.956] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0278.956] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9a468 [0278.956] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9a468 | out: hHeap=0x2750000) returned 1 [0278.956] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0278.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0278.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.976] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.977] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.977] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.978] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.978] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.979] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.980] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.980] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.981] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.982] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.982] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.983] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.983] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.984] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.984] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.984] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.985] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.985] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.986] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.986] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.987] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.987] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.993] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.994] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.994] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0278.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0278.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0278.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.058] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.059] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.060] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.061] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.062] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.063] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.064] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.067] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe38, lpOverlapped=0x0) returned 1 [0279.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1c8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe40, lpOverlapped=0x0) returned 1 [0279.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.071] CloseHandle (hObject=0x1f0) returned 1 [0279.071] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.072] SetEndOfFile (hFile=0x1e0) returned 1 [0279.106] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.vhd" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.vhd")) returned 1 [0279.107] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0279.107] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0279.107] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0279.107] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.108] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.108] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98740 [0279.108] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb2) returned 0xc9a790 [0279.109] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.109] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0279.110] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0279.111] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.111] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.111] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc986e0 [0279.111] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc90630 [0279.111] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.111] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0279.111] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0279.112] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.112] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0279.113] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.113] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.118] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.119] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.120] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.121] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.122] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc996d8 [0279.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc996d8 | out: hHeap=0x2750000) returned 1 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98720 [0279.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98720 | out: hHeap=0x2750000) returned 1 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.122] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.122] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.122] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0279.123] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.123] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0279.123] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.123] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0279.124] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0279.124] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.124] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.124] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x272, lpOverlapped=0x0) returned 1 [0279.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x280, lpOverlapped=0x0) returned 1 [0279.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.124] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.183] CloseHandle (hObject=0x1f0) returned 1 [0279.183] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.183] SetEndOfFile (hFile=0x1e0) returned 1 [0279.206] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.vhd")) returned 1 [0279.207] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0279.207] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.208] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.220] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.221] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0279.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0279.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987a0 [0279.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987a0 | out: hHeap=0x2750000) returned 1 [0279.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.222] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0279.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0279.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.223] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0279.224] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0279.224] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.224] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.224] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.224] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.226] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.227] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.227] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.228] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.228] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.228] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.232] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.232] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.233] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.233] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.234] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.235] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.237] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.238] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.238] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.239] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.239] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.245] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.246] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.246] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.247] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.247] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.247] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.248] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.248] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.248] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.248] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.249] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.249] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.250] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.253] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.261] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.261] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.263] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1398, lpOverlapped=0x0) returned 1 [0279.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec68, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x13a0, lpOverlapped=0x0) returned 1 [0279.270] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.270] CloseHandle (hObject=0x1f0) returned 1 [0279.271] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.272] SetEndOfFile (hFile=0x1e0) returned 1 [0279.284] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.vhd" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.vhd")) returned 1 [0279.285] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0279.285] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0279.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba248 [0279.286] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.286] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98720 [0279.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc90e18 [0279.286] FindNextFileW (in: hFindFile=0xbba248, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.286] FindClose (in: hFindFile=0xbba248 | out: hFindFile=0xbba248) returned 1 [0279.286] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0279.287] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.287] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98730 [0279.287] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc90ed0 [0279.287] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.287] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0279.287] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0279.288] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.288] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc986b0 [0279.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc901e0 [0279.288] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.288] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0279.289] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0279.289] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.289] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc986d0 [0279.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc904c0 [0279.290] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.290] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0279.290] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0279.290] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.291] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98760 [0279.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb2) returned 0xc9afd0 [0279.291] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.291] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0279.291] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0279.292] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.292] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98750 [0279.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb2) returned 0xc9af10 [0279.292] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.292] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0279.292] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0279.293] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.293] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98780 [0279.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb2) returned 0xc9ad90 [0279.293] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.293] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0279.293] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0279.293] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.293] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0279.293] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.294] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.301] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.301] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.301] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98d38 [0279.301] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98d38 | out: hHeap=0x2750000) returned 1 [0279.301] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.301] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986f0 [0279.301] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.302] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.302] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986f0 | out: hHeap=0x2750000) returned 1 [0279.302] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.302] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.303] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0279.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.303] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0279.303] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.303] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0279.304] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0279.304] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.304] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.305] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.305] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x27e, lpOverlapped=0x0) returned 1 [0279.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd82, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x280, lpOverlapped=0x0) returned 1 [0279.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.317] CloseHandle (hObject=0x1f0) returned 1 [0279.320] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.321] SetEndOfFile (hFile=0x1e0) returned 1 [0279.335] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.vhd")) returned 1 [0279.336] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0279.336] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.337] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.337] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0279.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0279.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987e0 [0279.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987e0 | out: hHeap=0x2750000) returned 1 [0279.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.346] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0279.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0279.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0279.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0279.347] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.347] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.370] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.379] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.405] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x10a8, lpOverlapped=0x0) returned 1 [0279.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffef58, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x10b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x10b0, lpOverlapped=0x0) returned 1 [0279.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.557] CloseHandle (hObject=0x1f0) returned 1 [0279.558] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.558] SetEndOfFile (hFile=0x1e0) returned 1 [0279.724] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.vhd" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.vhd")) returned 1 [0279.725] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0279.725] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0279.725] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0279.726] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.726] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.726] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc986f0 [0279.727] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc90b38 [0279.727] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.727] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0279.727] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0279.727] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.727] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0279.728] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0279.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0279.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986a0 [0279.738] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986a0 | out: hHeap=0x2750000) returned 1 [0279.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.739] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0279.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0279.774] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.774] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0279.776] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0279.776] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.776] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.776] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x272, lpOverlapped=0x0) returned 1 [0279.776] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffd8e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x280, lpOverlapped=0x0) returned 1 [0279.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.778] CloseHandle (hObject=0x1f0) returned 1 [0279.779] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.779] SetEndOfFile (hFile=0x1e0) returned 1 [0279.779] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.vhd" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.vhd")) returned 1 [0279.780] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0279.780] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.790] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.791] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0279.798] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0279.798] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98820 [0279.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98820 | out: hHeap=0x2750000) returned 1 [0279.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.799] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.799] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.799] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0279.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.800] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0279.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.800] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0279.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0279.801] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.801] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.802] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.812] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.814] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.816] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.817] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.836] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.837] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.839] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.840] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.841] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.842] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.843] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.847] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.848] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.853] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.853] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.854] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.857] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.858] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.868] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.870] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.871] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.871] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0279.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0279.872] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1428, lpOverlapped=0x0) returned 1 [0279.872] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffebd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1430, lpOverlapped=0x0) returned 1 [0279.873] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.874] CloseHandle (hObject=0x1f0) returned 1 [0279.874] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.874] SetEndOfFile (hFile=0x1e0) returned 1 [0279.883] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.vhd" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.vhd")) returned 1 [0279.884] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0279.884] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0279.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0279.886] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.886] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0279.886] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc987a0 [0279.886] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb0) returned 0xc90578 [0279.886] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0279.886] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0279.887] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb735bdcd, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xb735bdcd, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba288 [0279.887] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb735bdcd, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xb735bdcd, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.887] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1 [0279.887] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.890] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.891] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.892] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.893] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.894] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.895] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.896] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.900] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ce0 [0279.906] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ce0 | out: hHeap=0x2750000) returned 1 [0279.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0279.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0279.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.908] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.908] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0279.908] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.908] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0279.908] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.908] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0279.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0279.910] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.910] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1a, lpOverlapped=0x0) returned 1 [0279.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffe6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x20, lpOverlapped=0x0) returned 1 [0279.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.914] CloseHandle (hObject=0x1f0) returned 1 [0279.914] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.914] SetEndOfFile (hFile=0x1e0) returned 1 [0279.925] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), lpNewFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.vhd" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml.vhd")) returned 1 [0279.926] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb703abb0, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xb7250d38, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x569, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0279.926] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0279.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.928] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.929] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0279.937] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0279.937] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0279.938] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99418 [0279.938] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99418 | out: hHeap=0x2750000) returned 1 [0279.938] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0279.938] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0279.938] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.938] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0279.938] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0279.938] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.939] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0279.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0279.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0279.939] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0279.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.939] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0279.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0279.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0279.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0279.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0279.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x569, lpOverlapped=0x0) returned 1 [0279.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa97, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0279.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x570, lpOverlapped=0x0) returned 1 [0279.981] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0279.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0279.982] CloseHandle (hObject=0x1f0) returned 1 [0279.982] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0279.982] SetEndOfFile (hFile=0x1e0) returned 1 [0279.999] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), lpNewFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.vhd" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.vhd")) returned 1 [0280.000] FindNextFileW (in: hFindFile=0xbba288, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb703abb0, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0xb7250d38, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x569, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0280.001] FindClose (in: hFindFile=0xbba288 | out: hFindFile=0xbba288) returned 1 [0280.001] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f700b83, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x6f700b83, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0280.002] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f700b83, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x6f700b83, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.003] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0280.003] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.010] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.011] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0280.019] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0280.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.019] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0280.019] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0280.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.020] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0280.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.020] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0280.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.020] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0280.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0280.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.027] CloseHandle (hObject=0x1f0) returned 1 [0280.027] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.028] SetEndOfFile (hFile=0x1e0) returned 1 [0280.028] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl.vhd")) returned 1 [0280.029] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0280.029] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.070] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.071] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.072] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.073] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.074] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.075] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.076] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.077] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.077] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0280.077] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0280.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0280.078] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.078] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.078] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0280.078] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.078] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.078] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0280.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.079] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.079] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0280.080] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.080] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.097] CloseHandle (hObject=0x1f0) returned 1 [0280.097] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.097] SetEndOfFile (hFile=0x1e0) returned 1 [0280.120] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl.vhd")) returned 1 [0280.121] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0280.121] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.124] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.126] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.127] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.128] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.129] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0280.137] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0280.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0280.137] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.137] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0280.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.138] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0280.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0280.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0280.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0280.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.142] CloseHandle (hObject=0x1f0) returned 1 [0280.143] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.143] SetEndOfFile (hFile=0x1e0) returned 1 [0280.143] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl.vhd")) returned 1 [0280.144] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0280.144] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.155] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.156] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.157] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.158] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.159] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99158 [0280.160] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99158 | out: hHeap=0x2750000) returned 1 [0280.160] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986a0 [0280.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.161] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986a0 | out: hHeap=0x2750000) returned 1 [0280.161] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.207] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.207] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0280.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0280.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0280.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0280.210] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.210] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.235] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.236] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.236] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.237] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.237] CloseHandle (hObject=0x1f0) returned 1 [0280.237] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.237] SetEndOfFile (hFile=0x1e0) returned 1 [0280.238] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl.vhd")) returned 1 [0280.239] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0280.239] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.240] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.242] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.243] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.244] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.245] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.246] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.247] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.248] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.249] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.250] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.251] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.253] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0280.253] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0280.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0280.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0280.254] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.254] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.254] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0280.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.255] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.255] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.255] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.256] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0280.256] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.257] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.260] CloseHandle (hObject=0x1f0) returned 1 [0280.261] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.261] SetEndOfFile (hFile=0x1e0) returned 1 [0280.261] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl.vhd")) returned 1 [0280.262] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0280.262] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.263] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.263] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.282] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.283] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.285] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0280.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0280.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98800 [0280.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.289] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98800 | out: hHeap=0x2750000) returned 1 [0280.289] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.290] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0280.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.290] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0280.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.290] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0280.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0280.291] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.291] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.293] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.293] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.293] CloseHandle (hObject=0x1f0) returned 1 [0280.294] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.294] SetEndOfFile (hFile=0x1e0) returned 1 [0280.294] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl.vhd")) returned 1 [0280.295] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0280.295] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.300] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.300] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.312] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.312] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0280.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0280.312] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.312] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0280.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.312] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.313] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0280.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0280.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0280.314] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0280.314] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.314] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.314] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.315] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.315] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.335] CloseHandle (hObject=0x1f0) returned 1 [0280.335] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.336] SetEndOfFile (hFile=0x1e0) returned 1 [0280.349] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl.vhd")) returned 1 [0280.351] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0280.351] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.355] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.356] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.357] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.358] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.359] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc990a8 [0280.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc990a8 | out: hHeap=0x2750000) returned 1 [0280.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98860 [0280.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98860 | out: hHeap=0x2750000) returned 1 [0280.362] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.362] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.363] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.363] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0280.363] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.363] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.363] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.363] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.364] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0280.364] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.364] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.364] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.366] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.367] CloseHandle (hObject=0x1f0) returned 1 [0280.367] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.367] SetEndOfFile (hFile=0x1e0) returned 1 [0280.368] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl.vhd")) returned 1 [0280.368] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0280.368] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.416] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.416] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.416] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0280.416] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0280.416] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.416] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0280.417] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.417] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.417] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0280.417] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.417] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.418] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.418] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0280.418] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.418] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.419] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0280.420] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.420] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.420] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.423] CloseHandle (hObject=0x1f0) returned 1 [0280.423] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.424] SetEndOfFile (hFile=0x1e0) returned 1 [0280.434] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl.vhd")) returned 1 [0280.435] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0280.435] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.435] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.435] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.446] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.447] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc995d0 [0280.450] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc995d0 | out: hHeap=0x2750000) returned 1 [0280.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.450] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0280.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0280.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.451] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.451] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0280.451] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.452] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0280.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.452] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0280.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0280.453] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.453] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.453] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.454] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.455] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.461] CloseHandle (hObject=0x1f0) returned 1 [0280.461] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.461] SetEndOfFile (hFile=0x1e0) returned 1 [0280.462] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl.vhd")) returned 1 [0280.463] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0280.463] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.467] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.468] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.469] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.470] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.495] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.496] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.497] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0280.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0280.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0280.498] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.498] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.498] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0280.498] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.498] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.498] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.498] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0280.499] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.499] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0280.499] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.499] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0280.500] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0280.500] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.501] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.501] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.501] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.502] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.502] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.503] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.503] CloseHandle (hObject=0x1f0) returned 1 [0280.504] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.504] SetEndOfFile (hFile=0x1e0) returned 1 [0280.504] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl.vhd")) returned 1 [0280.507] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0280.508] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.517] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99100 [0280.517] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99100 | out: hHeap=0x2750000) returned 1 [0280.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987c0 [0280.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987c0 | out: hHeap=0x2750000) returned 1 [0280.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.518] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0280.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.518] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0280.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.518] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0280.519] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0280.519] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.520] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.520] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.523] CloseHandle (hObject=0x1f0) returned 1 [0280.523] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.523] SetEndOfFile (hFile=0x1e0) returned 1 [0280.532] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl.vhd")) returned 1 [0280.533] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0280.533] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.547] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc994c8 [0280.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc994c8 | out: hHeap=0x2750000) returned 1 [0280.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.548] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0280.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.548] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0280.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.549] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0280.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.549] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.549] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0280.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.557] CloseHandle (hObject=0x1f0) returned 1 [0280.558] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.558] SetEndOfFile (hFile=0x1e0) returned 1 [0280.558] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl.vhd")) returned 1 [0280.559] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0280.560] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.563] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.564] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.565] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.566] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0280.577] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0280.577] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.578] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0280.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0280.578] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.578] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.578] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0280.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.579] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.579] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0280.580] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.580] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.580] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.583] CloseHandle (hObject=0x1f0) returned 1 [0280.583] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.583] SetEndOfFile (hFile=0x1e0) returned 1 [0280.584] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl.vhd")) returned 1 [0280.584] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0280.585] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.585] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.587] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.598] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99368 [0280.599] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99368 | out: hHeap=0x2750000) returned 1 [0280.599] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.599] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98820 [0280.600] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.600] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.600] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98820 | out: hHeap=0x2750000) returned 1 [0280.600] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.600] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.600] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.600] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0280.601] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.601] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0280.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0280.602] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0280.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.602] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.602] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.603] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.605] CloseHandle (hObject=0x1f0) returned 1 [0280.606] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.606] SetEndOfFile (hFile=0x1e0) returned 1 [0280.606] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl.vhd")) returned 1 [0280.607] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0280.607] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.633] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc992b8 [0280.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc992b8 | out: hHeap=0x2750000) returned 1 [0280.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0280.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0280.635] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.635] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.635] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.635] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0280.635] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.635] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.636] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.636] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.636] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0280.637] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.637] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.637] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.641] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.642] CloseHandle (hObject=0x1f0) returned 1 [0280.643] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.643] SetEndOfFile (hFile=0x1e0) returned 1 [0280.643] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl.vhd")) returned 1 [0280.644] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0280.644] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.657] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0280.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0280.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0280.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.658] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0280.658] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.659] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0280.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.659] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0280.659] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.660] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0280.660] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0280.660] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.661] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.667] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.668] CloseHandle (hObject=0x1f0) returned 1 [0280.668] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.668] SetEndOfFile (hFile=0x1e0) returned 1 [0280.669] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl.vhd")) returned 1 [0280.670] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0280.670] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.671] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.676] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.677] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.678] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.679] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.680] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.681] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.684] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0280.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0280.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98840 [0280.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98840 | out: hHeap=0x2750000) returned 1 [0280.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.685] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.686] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0280.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0280.686] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.686] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0280.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0280.688] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.688] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.688] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.689] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.690] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.694] CloseHandle (hObject=0x1f0) returned 1 [0280.694] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.695] SetEndOfFile (hFile=0x1e0) returned 1 [0280.695] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl.vhd")) returned 1 [0280.696] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0280.696] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.698] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.732] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.732] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.732] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0280.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0280.733] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.733] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0280.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0280.733] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.733] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0280.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0280.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.735] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0280.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0280.736] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.736] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.737] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0280.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0280.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.740] CloseHandle (hObject=0x1f0) returned 1 [0280.740] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.740] SetEndOfFile (hFile=0x1e0) returned 1 [0280.741] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl.vhd")) returned 1 [0280.742] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f700b83, ftLastAccessTime.dwHighDateTime=0x1d6669a, ftLastWriteTime.dwLowDateTime=0x6f700b83, ftLastWriteTime.dwHighDateTime=0x1d6669a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0280.742] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcfcbff7d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xcfcbff7d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0280.742] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.755] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0280.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0280.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0280.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0280.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.757] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0280.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0280.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0280.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0280.758] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0280.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.813] CloseHandle (hObject=0x1f0) returned 1 [0280.813] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.813] SetEndOfFile (hFile=0x1e0) returned 1 [0280.836] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl.vhd")) returned 1 [0280.837] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x917b63d4, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb8b481f0, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0280.838] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0280.838] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.842] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.843] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.844] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.845] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.846] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.889] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0280.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0280.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0280.889] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0280.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0280.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0280.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986c0 [0280.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0280.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986c0 | out: hHeap=0x2750000) returned 1 [0280.890] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.890] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.895] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0280.895] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0280.895] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0280.895] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0280.895] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.896] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0280.896] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0280.896] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0280.897] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0280.897] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0280.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0280.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0280.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0280.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0280.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0280.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0280.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0280.903] CloseHandle (hObject=0x1f0) returned 1 [0280.904] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0280.904] SetEndOfFile (hFile=0x1e0) returned 1 [0281.009] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl.vhd")) returned 1 [0281.010] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x150f0f86, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39296693, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0281.010] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.012] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.013] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.014] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.015] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.016] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.017] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.018] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.019] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.020] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.021] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.022] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.023] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.024] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0281.024] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0281.024] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0281.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0281.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.025] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.025] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.025] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0281.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.026] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0281.026] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.026] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0281.027] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0281.027] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.028] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.127] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0281.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.129] CloseHandle (hObject=0x1f0) returned 1 [0281.129] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.129] SetEndOfFile (hFile=0x1e0) returned 1 [0281.167] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl.vhd")) returned 1 [0281.168] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1f83bc0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x32ea756e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0281.168] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.171] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.213] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.214] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.215] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.219] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.219] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0281.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0281.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0281.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0281.220] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.220] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.221] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0281.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.221] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0281.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.221] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0281.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0281.222] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.222] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.222] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.224] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.225] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.226] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.226] CloseHandle (hObject=0x1f0) returned 1 [0281.226] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.227] SetEndOfFile (hFile=0x1e0) returned 1 [0281.227] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl.vhd")) returned 1 [0281.228] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfdc37a18, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x290206fd, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0281.228] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.231] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.232] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.233] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.234] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.235] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.236] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.237] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.238] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.239] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.284] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0281.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0281.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.285] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0281.285] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0281.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.286] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.286] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0281.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.286] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0281.287] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.287] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0281.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0281.288] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.288] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.292] CloseHandle (hObject=0x1f0) returned 1 [0281.293] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.293] SetEndOfFile (hFile=0x1e0) returned 1 [0281.293] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl.vhd")) returned 1 [0281.294] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8a5979b2, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8a5979b2, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0281.295] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.300] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.301] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.302] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0281.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0281.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0281.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0281.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.311] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0281.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0281.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0281.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0281.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.314] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.314] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.315] CloseHandle (hObject=0x1f0) returned 1 [0281.315] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.316] SetEndOfFile (hFile=0x1e0) returned 1 [0281.316] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl.vhd")) returned 1 [0281.317] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcbc9fc38, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xefa43826, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0281.317] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.318] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.322] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.323] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.324] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.325] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.326] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.327] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.328] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.329] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.330] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.330] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99418 [0281.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99418 | out: hHeap=0x2750000) returned 1 [0281.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986a0 [0281.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986a0 | out: hHeap=0x2750000) returned 1 [0281.331] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.331] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.332] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0281.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.332] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0281.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.332] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0281.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0281.334] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.334] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0281.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.336] CloseHandle (hObject=0x1f0) returned 1 [0281.337] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.337] SetEndOfFile (hFile=0x1e0) returned 1 [0281.337] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl.vhd")) returned 1 [0281.338] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf1e2e9c9, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x1ca46d4f, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0281.338] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.344] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.345] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.346] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.347] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.348] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.349] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.350] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.351] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.352] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.353] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.354] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.354] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98d38 [0281.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98d38 | out: hHeap=0x2750000) returned 1 [0281.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.355] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0281.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.355] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0281.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.356] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.356] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0281.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.356] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0281.357] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.357] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0281.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0281.358] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.358] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.359] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.365] CloseHandle (hObject=0x1f0) returned 1 [0281.365] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.365] SetEndOfFile (hFile=0x1e0) returned 1 [0281.366] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl.vhd")) returned 1 [0281.367] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf7e12839, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x26688c0b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0281.367] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.377] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.378] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.379] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.380] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.381] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.382] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.382] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc994c8 [0281.382] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc994c8 | out: hHeap=0x2750000) returned 1 [0281.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98830 [0281.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98830 | out: hHeap=0x2750000) returned 1 [0281.383] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.383] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.384] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0281.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.384] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0281.384] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.384] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0281.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0281.386] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.386] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.390] CloseHandle (hObject=0x1f0) returned 1 [0281.391] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.391] SetEndOfFile (hFile=0x1e0) returned 1 [0281.391] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl.vhd")) returned 1 [0281.392] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0281.393] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.393] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.399] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.400] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.401] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.402] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.403] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.404] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.405] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.406] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.421] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.422] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99628 [0281.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99628 | out: hHeap=0x2750000) returned 1 [0281.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0281.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0281.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.424] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0281.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.424] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0281.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.425] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0281.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0281.426] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.426] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0281.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.429] CloseHandle (hObject=0x1f0) returned 1 [0281.430] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.430] SetEndOfFile (hFile=0x1e0) returned 1 [0281.443] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl.vhd")) returned 1 [0281.445] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0281.445] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.445] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.448] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0281.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0281.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98840 [0281.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98840 | out: hHeap=0x2750000) returned 1 [0281.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.463] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.463] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0281.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.463] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0281.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0281.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0281.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.465] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.467] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.467] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0281.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.468] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.469] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.469] CloseHandle (hObject=0x1f0) returned 1 [0281.469] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.470] SetEndOfFile (hFile=0x1e0) returned 1 [0281.472] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl.vhd")) returned 1 [0281.473] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0281.473] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.474] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.484] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.491] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.492] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.493] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.494] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0281.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0281.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98830 [0281.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98830 | out: hHeap=0x2750000) returned 1 [0281.495] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.495] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.496] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0281.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.496] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0281.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.496] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0281.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0281.497] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.497] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.498] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.499] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.500] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.500] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.501] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.501] CloseHandle (hObject=0x1f0) returned 1 [0281.501] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.502] SetEndOfFile (hFile=0x1e0) returned 1 [0281.502] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl.vhd")) returned 1 [0281.503] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0281.503] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.511] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.522] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0281.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0281.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987e0 [0281.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987e0 | out: hHeap=0x2750000) returned 1 [0281.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.524] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.524] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0281.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.524] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0281.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.525] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0281.526] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0281.527] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.527] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.530] CloseHandle (hObject=0x1f0) returned 1 [0281.530] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.530] SetEndOfFile (hFile=0x1e0) returned 1 [0281.532] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl.vhd")) returned 1 [0281.533] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0281.534] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.540] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.541] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.542] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.543] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.544] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.545] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.546] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.547] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.548] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0281.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0281.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.550] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0281.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.550] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0281.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.551] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.551] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0281.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.551] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0281.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.552] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0281.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0281.553] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.553] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0281.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.559] CloseHandle (hObject=0x1f0) returned 1 [0281.559] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.560] SetEndOfFile (hFile=0x1e0) returned 1 [0281.569] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl.vhd")) returned 1 [0281.570] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0281.571] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.571] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.579] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.580] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.585] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.585] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.585] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0281.585] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0281.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0281.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0281.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.586] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.587] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.587] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0281.587] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.587] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0281.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0281.588] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0281.588] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.588] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.589] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.591] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.592] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.592] CloseHandle (hObject=0x1f0) returned 1 [0281.592] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.593] SetEndOfFile (hFile=0x1e0) returned 1 [0281.593] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl.vhd")) returned 1 [0281.594] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0281.594] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.605] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.606] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.606] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.606] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.606] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0281.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0281.606] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.607] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0281.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0281.607] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.607] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.607] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.607] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0281.608] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.608] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0281.608] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.608] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0281.648] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0281.648] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.648] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.649] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.649] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.650] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.650] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0281.654] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.654] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.655] CloseHandle (hObject=0x1f0) returned 1 [0281.655] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.655] SetEndOfFile (hFile=0x1e0) returned 1 [0281.655] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl.vhd")) returned 1 [0281.657] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0281.657] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.662] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99158 [0281.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99158 | out: hHeap=0x2750000) returned 1 [0281.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986a0 [0281.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986a0 | out: hHeap=0x2750000) returned 1 [0281.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.676] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0281.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0281.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0281.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0281.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.678] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.678] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0281.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0281.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.681] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.681] CloseHandle (hObject=0x1f0) returned 1 [0281.682] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.682] SetEndOfFile (hFile=0x1e0) returned 1 [0281.682] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.018.etl.vhd")) returned 1 [0281.683] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0281.684] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.684] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.699] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99260 [0281.702] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99260 | out: hHeap=0x2750000) returned 1 [0281.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.702] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0281.703] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0281.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.704] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.704] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.704] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0281.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.705] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0281.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.705] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0281.706] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0281.706] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.706] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.707] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0281.707] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0281.708] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0281.709] CloseHandle (hObject=0x1f0) returned 1 [0281.709] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.709] SetEndOfFile (hFile=0x1e0) returned 1 [0281.716] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.019.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.019.etl.vhd")) returned 1 [0281.717] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0281.717] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.020.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0281.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0281.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0281.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0281.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0281.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0281.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0281.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0281.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0281.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98800 [0281.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0281.730] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98800 | out: hHeap=0x2750000) returned 1 [0281.730] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.731] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0281.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0281.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0281.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0281.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.731] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0281.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0281.732] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0281.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0281.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0281.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0281.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0282.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0282.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0282.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0282.067] CloseHandle (hObject=0x1f0) returned 1 [0282.067] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.067] SetEndOfFile (hFile=0x1e0) returned 1 [0282.088] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.020.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.020.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.020.etl.vhd")) returned 1 [0282.089] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0282.089] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.021.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0282.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.139] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0282.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0282.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0282.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0282.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0282.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0282.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0282.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0282.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0282.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.140] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0282.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0282.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0282.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0282.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0282.145] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0282.146] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0282.146] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.146] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0282.146] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0282.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0282.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0282.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0282.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0282.158] CloseHandle (hObject=0x1f0) returned 1 [0282.158] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.158] SetEndOfFile (hFile=0x1e0) returned 1 [0282.158] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.021.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.021.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.021.etl.vhd")) returned 1 [0282.159] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0282.159] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.022.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0282.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.174] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.175] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.176] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.177] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.178] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.179] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.180] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.181] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.182] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.183] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.184] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.184] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0282.184] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0282.184] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc990a8 [0282.184] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc990a8 | out: hHeap=0x2750000) returned 1 [0282.185] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0282.185] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98860 [0282.185] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.185] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0282.185] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98860 | out: hHeap=0x2750000) returned 1 [0282.185] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0282.185] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.186] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0282.186] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0282.186] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0282.186] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0282.186] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.186] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0282.216] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0282.216] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0282.217] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.217] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0282.217] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0282.229] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0282.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0282.230] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.230] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0282.231] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.231] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0282.231] CloseHandle (hObject=0x1f0) returned 1 [0282.232] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.232] SetEndOfFile (hFile=0x1e0) returned 1 [0282.232] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.022.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.022.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.022.etl.vhd")) returned 1 [0282.233] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0282.233] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.023.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0282.234] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.293] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.294] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.295] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.296] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.297] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.298] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0282.299] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0282.299] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0282.299] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0282.299] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0282.299] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0282.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0282.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0282.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0282.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0282.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.300] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0282.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0282.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0282.300] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0282.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.300] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0282.301] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0282.301] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0282.302] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0282.302] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0282.302] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.302] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0282.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0282.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0282.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0282.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0282.341] CloseHandle (hObject=0x1f0) returned 1 [0282.341] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0282.341] SetEndOfFile (hFile=0x1e0) returned 1 [0282.342] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.023.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.023.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.023.etl.vhd")) returned 1 [0282.343] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0282.343] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.024.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0282.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0282.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.029] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.030] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.031] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.032] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.033] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.034] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.035] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.036] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.037] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.038] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.039] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.040] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.041] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.041] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc995d0 [0283.041] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc995d0 | out: hHeap=0x2750000) returned 1 [0283.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0283.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0283.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.042] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0283.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.043] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0283.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.043] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0283.044] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0283.044] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.044] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.044] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0283.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0283.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.076] CloseHandle (hObject=0x1f0) returned 1 [0283.076] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.077] SetEndOfFile (hFile=0x1e0) returned 1 [0283.126] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.024.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.024.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.024.etl.vhd")) returned 1 [0283.127] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UP4198~1.ETL")) returned 1 [0283.127] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.025.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.138] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0283.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0283.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0283.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0283.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.139] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0283.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0283.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0283.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0283.141] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.141] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0283.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.141] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0283.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.142] CloseHandle (hObject=0x1f0) returned 1 [0283.142] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.142] SetEndOfFile (hFile=0x1e0) returned 1 [0283.143] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.025.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.025.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.025.etl.vhd")) returned 1 [0283.143] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UP96CC~1.ETL")) returned 1 [0283.144] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.026.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.151] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.152] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.153] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.154] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99100 [0283.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99100 | out: hHeap=0x2750000) returned 1 [0283.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.154] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987c0 [0283.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.154] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.155] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987c0 | out: hHeap=0x2750000) returned 1 [0283.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.155] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.155] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0283.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.155] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0283.155] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.155] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0283.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0283.157] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.157] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0283.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0283.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.292] CloseHandle (hObject=0x1f0) returned 1 [0283.292] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.292] SetEndOfFile (hFile=0x1e0) returned 1 [0283.363] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.026.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.026.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.026.etl.vhd")) returned 1 [0283.364] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UP7B54~1.ETL")) returned 1 [0283.364] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.027.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.374] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.375] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.376] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc994c8 [0283.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc994c8 | out: hHeap=0x2750000) returned 1 [0283.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0283.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0283.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.378] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0283.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.378] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0283.378] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.378] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0283.379] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0283.379] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.380] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.382] CloseHandle (hObject=0x1f0) returned 1 [0283.382] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.383] SetEndOfFile (hFile=0x1e0) returned 1 [0283.383] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.027.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.027.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.027.etl.vhd")) returned 1 [0283.384] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPC098~1.ETL")) returned 1 [0283.384] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.028.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0283.394] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0283.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.394] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0283.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0283.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.395] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.395] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0283.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.395] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0283.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.396] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0283.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0283.397] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.397] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.404] CloseHandle (hObject=0x1f0) returned 1 [0283.404] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.404] SetEndOfFile (hFile=0x1e0) returned 1 [0283.404] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.028.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.028.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.028.etl.vhd")) returned 1 [0283.405] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.029.etl", cAlternateFileName="UP16CC~1.ETL")) returned 1 [0283.405] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.029.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.406] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.417] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.417] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.417] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99368 [0283.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99368 | out: hHeap=0x2750000) returned 1 [0283.418] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.418] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98820 [0283.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98820 | out: hHeap=0x2750000) returned 1 [0283.418] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.418] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.419] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.419] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0283.419] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.419] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0283.419] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.419] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0283.420] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0283.420] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.424] CloseHandle (hObject=0x1f0) returned 1 [0283.424] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.424] SetEndOfFile (hFile=0x1e0) returned 1 [0283.424] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.029.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.029.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.029.etl.vhd")) returned 1 [0283.425] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.030.etl", cAlternateFileName="UPDA92~1.ETL")) returned 1 [0283.426] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.030.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.429] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.430] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.437] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc992b8 [0283.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc992b8 | out: hHeap=0x2750000) returned 1 [0283.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0283.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0283.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.445] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0283.445] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.446] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0283.446] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.446] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0283.447] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0283.447] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.447] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.447] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.447] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.448] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.448] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.448] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0283.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0283.449] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.449] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.449] CloseHandle (hObject=0x1f0) returned 1 [0283.450] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.450] SetEndOfFile (hFile=0x1e0) returned 1 [0283.450] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.030.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.030.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.030.etl.vhd")) returned 1 [0283.451] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.031.etl", cAlternateFileName="UPBF2A~1.ETL")) returned 1 [0283.451] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.031.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.451] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.452] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0283.461] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0283.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.461] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0283.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0283.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.462] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0283.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0283.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0283.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0283.464] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.464] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.464] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.466] CloseHandle (hObject=0x1f0) returned 1 [0283.467] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.467] SetEndOfFile (hFile=0x1e0) returned 1 [0283.467] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.031.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.031.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.031.etl.vhd")) returned 1 [0283.468] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.032.etl", cAlternateFileName="UP750B~1.ETL")) returned 1 [0283.468] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.032.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.469] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.471] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.472] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.473] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.480] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.480] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0283.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0283.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98840 [0283.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98840 | out: hHeap=0x2750000) returned 1 [0283.481] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.481] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.482] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0283.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.482] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0283.482] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.482] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0283.484] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0283.484] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.488] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.489] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.489] CloseHandle (hObject=0x1f0) returned 1 [0283.489] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.489] SetEndOfFile (hFile=0x1e0) returned 1 [0283.490] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.032.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.032.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.032.etl.vhd")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.033.etl", cAlternateFileName="UP6487~1.ETL")) returned 1 [0283.491] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.033.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.500] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.501] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.502] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.503] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.504] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.505] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.506] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.507] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.508] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.509] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.510] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.510] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.510] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0283.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0283.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0283.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.511] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0283.511] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.512] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0283.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.512] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0283.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.512] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0283.514] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0283.514] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.514] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.514] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.514] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.517] CloseHandle (hObject=0x1f0) returned 1 [0283.517] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.517] SetEndOfFile (hFile=0x1e0) returned 1 [0283.519] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.033.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.033.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.033.etl.vhd")) returned 1 [0283.520] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.034.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0283.520] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.034.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.527] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.528] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.529] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.530] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.536] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0283.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0283.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0283.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.537] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0283.537] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.538] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0283.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.538] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0283.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.538] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0283.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0283.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.578] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.581] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.582] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.582] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.583] CloseHandle (hObject=0x1f0) returned 1 [0283.583] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.583] SetEndOfFile (hFile=0x1e0) returned 1 [0283.584] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.034.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.034.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.034.etl.vhd")) returned 1 [0283.585] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.035.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0283.585] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.035.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.587] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.594] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.595] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.596] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.600] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.600] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.600] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0283.600] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0283.601] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.601] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc986c0 [0283.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc986c0 | out: hHeap=0x2750000) returned 1 [0283.601] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.601] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.602] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0283.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.602] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0283.602] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.602] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0283.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0283.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.604] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.606] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.608] CloseHandle (hObject=0x1f0) returned 1 [0283.608] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.608] SetEndOfFile (hFile=0x1e0) returned 1 [0283.609] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.035.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.035.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.035.etl.vhd")) returned 1 [0283.610] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.036.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0283.610] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.036.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.610] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.615] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.616] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.617] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.618] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.619] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0283.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0283.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.623] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0283.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.623] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.624] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0283.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.624] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.624] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0283.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.624] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0283.624] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0283.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0283.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.656] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.657] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.659] CloseHandle (hObject=0x1f0) returned 1 [0283.659] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.659] SetEndOfFile (hFile=0x1e0) returned 1 [0283.660] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.036.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.036.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.036.etl.vhd")) returned 1 [0283.661] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.037.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0283.661] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.037.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.663] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.664] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.665] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.672] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0283.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0283.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0283.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0283.673] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.673] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.674] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0283.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.674] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758358 [0283.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.674] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758358 | out: hHeap=0x2750000) returned 1 [0283.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0283.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.675] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.677] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.678] CloseHandle (hObject=0x1f0) returned 1 [0283.678] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.678] SetEndOfFile (hFile=0x1e0) returned 1 [0283.679] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.037.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.037.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.037.etl.vhd")) returned 1 [0283.680] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0283.680] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.682] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.683] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.684] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.685] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.686] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.687] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.688] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.692] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.693] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.693] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0283.693] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0283.693] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.693] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc987b0 [0283.693] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.693] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.693] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc987b0 | out: hHeap=0x2750000) returned 1 [0283.693] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.693] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.694] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.694] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0283.694] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.694] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0283.694] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.694] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0283.695] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0283.695] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.695] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.696] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.696] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.696] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.697] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x0, lpOverlapped=0x0) returned 1 [0283.697] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.697] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.698] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.698] CloseHandle (hObject=0x1f0) returned 1 [0283.698] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.698] SetEndOfFile (hFile=0x1e0) returned 1 [0283.699] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.001.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.001.etl.vhd")) returned 1 [0283.699] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0283.700] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.002.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.702] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.708] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.709] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.710] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.711] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc989e8 [0283.712] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0283.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0283.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98700 [0283.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98700 | out: hHeap=0x2750000) returned 1 [0283.713] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.713] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.714] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.714] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0283.714] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.714] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0283.714] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.714] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0283.715] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0283.715] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.715] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.716] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc989e8 | out: hHeap=0x2750000) returned 1 [0283.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1000, lpOverlapped=0x0) returned 1 [0283.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1000, lpOverlapped=0x0) returned 1 [0283.718] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.718] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.719] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.719] CloseHandle (hObject=0x1f0) returned 1 [0283.719] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.719] SetEndOfFile (hFile=0x1e0) returned 1 [0283.720] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.002.etl"), lpNewFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateUx.002.etl.vhd" (normalized: "c:\\programdata\\usoshared\\logs\\updateux.002.etl.vhd")) returned 1 [0283.721] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 0 [0283.721] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0283.721] FindFirstFileW (in: lpFileName="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0283.722] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.722] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0283.723] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0283.723] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0283.723] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.723] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0283.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc987b0 [0283.723] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0xc989e8 [0283.724] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0283.724] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc987c0 [0283.724] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6c) returned 0xc98a58 [0283.724] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0283.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.729] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.730] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.731] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.732] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.733] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.734] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.735] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.736] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.737] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.738] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc98ad0 [0283.738] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9b470 [0283.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0283.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0283.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b5d8 [0283.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc98770 [0283.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b5d8 | out: hHeap=0x2750000) returned 1 [0283.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98770 | out: hHeap=0x2750000) returned 1 [0283.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.739] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.740] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0283.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9b470 [0283.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0283.740] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.740] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0283.741] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0283.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9b470 [0283.741] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b470 | out: hHeap=0x2750000) returned 1 [0283.742] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ad0 | out: hHeap=0x2750000) returned 1 [0283.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xf9, lpOverlapped=0x0) returned 1 [0283.747] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff07, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.747] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x100, lpOverlapped=0x0) returned 1 [0283.748] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.748] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.748] CloseHandle (hObject=0x1f0) returned 1 [0283.749] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.749] SetEndOfFile (hFile=0x1e0) returned 1 [0283.749] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.vhd" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm.vhd")) returned 1 [0283.751] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0283.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98840 [0283.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x70) returned 0xc98ad0 [0283.751] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0283.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc986a0 [0283.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x76) returned 0xc98b48 [0283.751] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0 [0283.752] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0283.752] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0283.755] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.755] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbba47a90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0283.755] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98850 [0283.755] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc95390 [0283.755] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0283.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files (x86)\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.757] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba48bb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0283.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98770 [0283.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc98bc8 [0283.757] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0283.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98800 [0283.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc9b470 [0283.757] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0283.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc987d0 [0283.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc9b4e0 [0283.757] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb5200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0283.757] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.758] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0283.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files (x86)\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.758] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0283.758] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0283.759] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0283.760] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.760] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0283.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.761] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0283.761] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0283.761] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba188 [0283.763] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.763] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DAO", cAlternateFileName="")) returned 1 [0283.763] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98700 [0283.763] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x72) returned 0xc9b550 [0283.763] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ink", cAlternateFileName="")) returned 1 [0283.763] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc986c0 [0283.763] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x72) returned 0xc9b5d0 [0283.763] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSEnv", cAlternateFileName="")) returned 1 [0283.763] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc987e0 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x76) returned 0xc9b650 [0283.764] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc987f0 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x78) returned 0xc9b6d0 [0283.764] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98820 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x80) returned 0xc9b750 [0283.764] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98830 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x7c) returned 0xc9b7d8 [0283.764] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc98860 [0283.764] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x7a) returned 0xc9b860 [0283.765] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0283.765] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b988 [0283.765] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x70) returned 0xc9bcf0 [0283.765] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0283.765] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b958 [0283.765] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x72) returned 0xc9bd68 [0283.765] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0283.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b978 [0283.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x74) returned 0xc9bde8 [0283.766] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0283.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba78 [0283.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x74) returned 0xc9be68 [0283.766] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0283.766] FindClose (in: hFindFile=0xbba188 | out: hFindFile=0xbba188) returned 1 [0283.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba188 [0283.768] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.768] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0283.768] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b9f8 [0283.768] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6a) returned 0xc9bee8 [0283.768] FindNextFileW (in: hFindFile=0xbba188, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0283.768] FindClose (in: hFindFile=0xbba188 | out: hFindFile=0xbba188) returned 1 [0283.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba208 [0283.769] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.769] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0283.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba28 [0283.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc9bf60 [0283.769] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0283.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba88 [0283.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc953f8 [0283.770] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0283.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba38 [0283.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc9bfd0 [0283.770] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0283.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba98 [0283.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc9c298 [0283.770] FindNextFileW (in: hFindFile=0xbba208, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 0 [0283.770] FindClose (in: hFindFile=0xbba208 | out: hFindFile=0xbba208) returned 1 [0283.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0283.772] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.772] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1 [0283.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b9d8 [0283.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc95668 [0283.772] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Download", cAlternateFileName="")) returned 1 [0283.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b998 [0283.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc94fe8 [0283.772] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0283.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.773] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.776] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.777] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.778] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.779] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.780] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.781] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.782] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.783] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0283.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0283.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0283.784] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0283.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0283.784] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb08 [0283.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0283.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb08 | out: hHeap=0x2750000) returned 1 [0283.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.785] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0283.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0283.785] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0283.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.785] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0283.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0283.787] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.787] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0283.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.800] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.800] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1650, lpOverlapped=0x0) returned 1 [0283.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe9b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1650, lpOverlapped=0x0) returned 1 [0283.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.804] CloseHandle (hObject=0x1f0) returned 1 [0283.804] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.804] SetEndOfFile (hFile=0x1e0) returned 1 [0283.805] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe.vhd" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe.vhd")) returned 1 [0283.811] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1 [0283.811] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b9a8 [0283.811] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc956d0 [0283.811] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 0 [0283.811] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0283.811] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0283.812] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.814] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0283.814] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0283.814] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0283.814] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.814] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0283.814] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b9b8 [0283.815] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc9c7d8 [0283.815] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0283.815] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0283.815] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0283.815] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.816] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0283.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.818] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0283.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0283.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0283.827] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0283.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0283.827] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9b9c8 [0283.827] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.828] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0283.828] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b9c8 | out: hHeap=0x2750000) returned 1 [0283.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.828] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.829] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0283.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0283.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0283.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0283.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0283.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0283.830] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1c4, lpOverlapped=0x0) returned 1 [0283.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d0, lpOverlapped=0x0) returned 1 [0283.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.832] CloseHandle (hObject=0x1f0) returned 1 [0283.832] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.832] SetEndOfFile (hFile=0x1e0) returned 1 [0283.832] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins"), lpNewFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\install.ins.vhd" (normalized: "c:\\program files (x86)\\internet explorer\\signup\\install.ins.vhd")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0283.835] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0283.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\images\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0283.835] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.835] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0283.835] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0283.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0283.836] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.836] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408b2676, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x69769e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0283.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.837] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e61df, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f3c6579, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0283.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.838] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0283.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files (x86)\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.839] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0283.839] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0283.839] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0283.839] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.839] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb855b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9beb855b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9beb855b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1 [0283.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.840] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1 [0283.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.841] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0 [0283.841] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0283.841] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0283.843] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0283.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.845] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.847] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.848] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.849] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.850] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.851] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0283.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0283.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99578 [0283.852] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99578 | out: hHeap=0x2750000) returned 1 [0283.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0283.852] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9b938 [0283.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0283.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b938 | out: hHeap=0x2750000) returned 1 [0283.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.853] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0283.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0283.853] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0283.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.853] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0283.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0283.854] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.854] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0283.855] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.856] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.856] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.857] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.858] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.859] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.859] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.860] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.861] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.862] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.863] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1040, lpOverlapped=0x0) returned 1 [0283.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffefc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1040, lpOverlapped=0x0) returned 1 [0283.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0283.866] CloseHandle (hObject=0x1f0) returned 1 [0283.867] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.867] SetEndOfFile (hFile=0x1e0) returned 1 [0283.867] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\adodb.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\adodb.dll.vhd")) returned 1 [0283.868] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a238f8c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7a4aa8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0283.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0283.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.870] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0283.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0283.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc996d8 [0283.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc996d8 | out: hHeap=0x2750000) returned 1 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9b9c8 [0283.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0283.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b9c8 | out: hHeap=0x2750000) returned 1 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.879] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0283.879] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27586a0 [0283.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27586a0 | out: hHeap=0x2750000) returned 1 [0283.881] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0283.881] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0283.881] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0283.881] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0283.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0283.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.884] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.884] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.885] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.889] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.889] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.891] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.892] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.892] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.897] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.897] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.898] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.898] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.902] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.902] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.903] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.904] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.905] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.905] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.906] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.906] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.907] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.907] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.908] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.908] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.910] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.910] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.911] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.911] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.924] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.926] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.932] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.935] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.938] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.939] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.939] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.940] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.940] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.941] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.941] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.942] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.942] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.942] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.943] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.943] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.943] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.943] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.944] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.944] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.944] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.944] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.945] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.946] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.947] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.947] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.966] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.972] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.972] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.973] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.973] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.974] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.974] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.989] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.991] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.992] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.993] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.996] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.997] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.998] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0283.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0283.999] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.000] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.000] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.001] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.001] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.002] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.003] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.004] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.005] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.007] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.008] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.012] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.016] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.026] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.026] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.027] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.039] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.040] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.102] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.102] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.103] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.104] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.106] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.107] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.108] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.109] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.109] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.580] CloseHandle (hObject=0x1f0) returned 1 [0284.581] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.581] SetEndOfFile (hFile=0x1e0) returned 1 [0284.591] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.mshtml.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.mshtml.dll.vhd")) returned 1 [0284.594] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a2ab773, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0284.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.595] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.597] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.598] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.599] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.600] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.601] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.602] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.603] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.604] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0284.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0284.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc990a8 [0284.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc990a8 | out: hHeap=0x2750000) returned 1 [0284.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0284.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb08 [0284.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0284.604] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb08 | out: hHeap=0x2750000) returned 1 [0284.604] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.605] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0284.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0284.605] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0284.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.605] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0284.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0284.606] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.606] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0284.607] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.607] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.609] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.611] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1440, lpOverlapped=0x0) returned 1 [0284.612] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffebc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1440, lpOverlapped=0x0) returned 1 [0284.613] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.613] CloseHandle (hObject=0x1f0) returned 1 [0284.613] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.613] SetEndOfFile (hFile=0x1e0) returned 1 [0284.614] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\Microsoft.stdformat.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\microsoft.stdformat.dll.vhd")) returned 1 [0284.614] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0284.615] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.620] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.621] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0284.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0284.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0284.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0284.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0284.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9baa8 [0284.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0284.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9baa8 | out: hHeap=0x2750000) returned 1 [0284.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.631] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0284.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0284.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0284.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0284.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0284.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0284.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.635] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1040, lpOverlapped=0x0) returned 1 [0284.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffefc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1040, lpOverlapped=0x0) returned 1 [0284.636] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.636] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.637] CloseHandle (hObject=0x1f0) returned 1 [0284.637] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.637] SetEndOfFile (hFile=0x1e0) returned 1 [0284.637] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\msdatasrc.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\msdatasrc.dll.vhd")) returned 1 [0284.638] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0284.638] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.645] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.647] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.648] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.649] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.650] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.651] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0284.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0284.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0284.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0284.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0284.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9b9c8 [0284.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0284.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b9c8 | out: hHeap=0x2750000) returned 1 [0284.654] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.654] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.655] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0284.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0284.655] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0284.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.655] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0284.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0284.656] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.656] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0284.657] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.658] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.658] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.659] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.659] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.660] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x40, lpOverlapped=0x0) returned 1 [0284.661] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffc0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.661] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x40, lpOverlapped=0x0) returned 1 [0284.662] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.662] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.662] CloseHandle (hObject=0x1f0) returned 1 [0284.662] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.663] SetEndOfFile (hFile=0x1e0) returned 1 [0284.663] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\stdole.dll.vhd" (normalized: "c:\\program files (x86)\\microsoft.net\\primary interop assemblies\\stdole.dll.vhd")) returned 1 [0284.664] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0284.664] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0284.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.665] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.665] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0284.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.666] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.667] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.668] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.669] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.670] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.671] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.672] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.673] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.674] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.675] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9c848 [0284.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9c9c0 [0284.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0284.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0284.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9cb28 [0284.675] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9b968 [0284.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.675] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cb28 | out: hHeap=0x2750000) returned 1 [0284.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9b968 | out: hHeap=0x2750000) returned 1 [0284.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.676] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0284.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9c9c0 [0284.676] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0284.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.676] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0284.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0284.677] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9c9c0 [0284.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c9c0 | out: hHeap=0x2750000) returned 1 [0284.677] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9c848 | out: hHeap=0x2750000) returned 1 [0284.678] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.678] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa4, lpOverlapped=0x0) returned 1 [0284.679] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffff5c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb0, lpOverlapped=0x0) returned 1 [0284.680] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.680] CloseHandle (hObject=0x1f0) returned 1 [0284.680] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.680] SetEndOfFile (hFile=0x1e0) returned 1 [0284.684] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log.vhd" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log.vhd")) returned 1 [0284.685] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0284.685] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.685] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.685] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.685] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0284.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b948 [0284.685] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8a) returned 0xc9c848 [0284.686] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0284.686] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.686] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0284.686] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.686] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0284.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba08 [0284.686] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x80) returned 0xc9c8e0 [0284.686] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0284.686] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0284.686] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\Offline\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0284.687] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.687] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0284.687] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0284.687] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0284.687] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.688] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0284.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\EppManifest.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\eppmanifest.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.689] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0284.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpAsDesc.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpasdesc.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.690] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0284.690] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\MpEvMsg.dll.mui" (normalized: "c:\\program files (x86)\\windows defender\\en-us\\mpevmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.690] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0284.691] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0284.691] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0284.691] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.691] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0284.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\msoeres.dll.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\msoeres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.692] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0284.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\WinMail.exe.mui" (normalized: "c:\\program files (x86)\\windows mail\\en-us\\winmail.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.692] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0284.692] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0284.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.693] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.693] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0284.693] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0284.693] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.693] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0284.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\Revert.wmz" (normalized: "c:\\program files (x86)\\windows media player\\skins\\revert.wmz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.696] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0284.696] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0284.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.697] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.697] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0284.697] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.697] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0284.699] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.699] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0284.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.700] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0284.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\connectionmanager_dmr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.701] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0284.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.702] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0284.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_120.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_120.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.703] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0284.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.jpg" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.704] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0284.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\DMR_48.png" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\dmr_48.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.706] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0284.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.708] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0284.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\renderingcontrol_dmp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.708] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0284.708] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0284.709] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba308 [0284.709] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.709] FindNextFileW (in: hFindFile=0xbba308, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0284.709] FindClose (in: hFindFile=0xbba308 | out: hFindFile=0xbba308) returned 1 [0284.709] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba348 [0284.711] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.711] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b1b89b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0284.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\mpvis.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\mpvis.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.712] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0284.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\setup_wm.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\setup_wm.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.713] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0284.713] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmlaunch.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmlaunch.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.713] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0284.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmplayer.exe.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmplayer.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.714] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0284.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpmediasharing.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.715] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0284.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssci.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssci.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.716] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0284.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\wmpnssui.dll.mui" (normalized: "c:\\program files (x86)\\windows media player\\en-us\\wmpnssui.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.716] FindNextFileW (in: hFindFile=0xbba348, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0284.716] FindClose (in: hFindFile=0xbba348 | out: hFindFile=0xbba348) returned 1 [0284.717] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0284.719] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.720] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0284.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba18 [0284.720] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x72) returned 0xc9c968 [0284.720] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x97a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0284.720] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextService.dll" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservice.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.721] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0284.721] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.722] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0284.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceArray.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicearray.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.722] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775f2f48, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775f2f48, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775f2f48, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0284.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicedayi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.723] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1 [0284.723] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextservicetigrinya.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.723] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0284.723] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceYi.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceyi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.724] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0284.724] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0284.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0284.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0284.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bae8 [0284.725] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x68) returned 0xc9c228 [0284.725] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480bd806, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xdc94812c, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x480bd806, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x417c00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0284.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\wordpad.exe" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpad.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.726] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0284.726] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\WordpadFilter.dll" (normalized: "c:\\program files (x86)\\windows nt\\accessories\\wordpadfilter.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.727] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0284.727] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0284.727] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba408 [0284.727] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.727] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4094d875, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0284.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\imagingdevices.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.728] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0284.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoacq.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.731] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0284.731] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui" (normalized: "c:\\program files (x86)\\windows photo viewer\\en-us\\photoviewer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.732] FindNextFileW (in: hFindFile=0xbba408, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0284.732] FindClose (in: hFindFile=0xbba408 | out: hFindFile=0xbba408) returned 1 [0284.732] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0284.734] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.734] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0284.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba48 [0284.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xb6) returned 0xc9b210 [0284.734] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0284.734] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b9c8 [0284.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x86) returned 0xc9c9e8 [0284.735] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0284.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba58 [0284.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x70) returned 0xc9ca78 [0284.735] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0284.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9baa8 [0284.735] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x7e) returned 0xc9caf0 [0284.735] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 0 [0284.735] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0284.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0284.736] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.736] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0284.736] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bab8 [0284.736] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x52) returned 0xc93b38 [0284.736] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0284.736] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.737] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0284.737] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b968 [0284.737] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc939b8 [0284.737] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0284.737] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9baf8 [0284.737] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc937d8 [0284.737] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0284.737] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b9e8 [0284.737] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0xc93b98 [0284.737] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0284.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.737] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0284.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.737] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0284.737] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0284.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0284.738] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.738] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0284.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.738] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0284.738] FindClose (in: hFindFile=0xbb9e88 | out: hFindFile=0xbb9e88) returned 1 [0284.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bb08 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x74) returned 0xc9cb78 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9ba68 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0xc9c308 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bac8 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6c) returned 0xc9cbf8 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bad8 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x70) returned 0xc9cc70 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b918 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0xa0) returned 0xc964f8 [0284.739] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0284.739] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b928 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x7a) returned 0xc9cce8 [0284.740] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9b938 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x74) returned 0xc9cd70 [0284.740] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bcb8 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x70) returned 0xc9cdf0 [0284.740] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bb18 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x6e) returned 0xc9ce68 [0284.740] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc48 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc9c378 [0284.740] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bcc8 [0284.740] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0xc9c538 [0284.741] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0284.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bca8 [0284.741] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x68) returned 0xc9c068 [0284.741] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0284.741] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba4c8 [0284.742] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.742] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0284.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.749] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0284.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0284.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bba8 [0284.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bba8 | out: hHeap=0x2750000) returned 1 [0284.750] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.750] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.751] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0284.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.751] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0284.751] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.751] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0284.752] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0284.752] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.752] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.752] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.752] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.752] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.753] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1e70, lpOverlapped=0x0) returned 1 [0284.754] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe190, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.754] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1e70, lpOverlapped=0x0) returned 1 [0284.755] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.755] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.755] CloseHandle (hObject=0x1f0) returned 1 [0284.755] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.755] SetEndOfFile (hFile=0x1e0) returned 1 [0284.755] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), lpNewFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.vhd" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.vhd")) returned 1 [0284.756] FindNextFileW (in: hFindFile=0xbba4c8, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0284.756] FindClose (in: hFindFile=0xbba4c8 | out: hFindFile=0xbba4c8) returned 1 [0284.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba148 [0284.757] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.757] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0284.757] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.758] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.761] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.762] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.763] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.764] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.765] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98c88 [0284.766] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98c88 | out: hHeap=0x2750000) returned 1 [0284.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.766] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb98 [0284.767] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.767] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.767] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb98 | out: hHeap=0x2750000) returned 1 [0284.767] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.767] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.767] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.767] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0284.767] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.767] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0284.767] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.767] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0284.769] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0284.769] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.769] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.769] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1c4, lpOverlapped=0x0) returned 1 [0284.769] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffe3c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.769] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d0, lpOverlapped=0x0) returned 1 [0284.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.770] CloseHandle (hObject=0x1f0) returned 1 [0284.770] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.770] SetEndOfFile (hFile=0x1e0) returned 1 [0284.773] MoveFileW (lpExistingFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), lpNewFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.vhd" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.vhd")) returned 1 [0284.776] FindNextFileW (in: hFindFile=0xbba148, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0284.776] FindClose (in: hFindFile=0xbba148 | out: hFindFile=0xbba148) returned 1 [0284.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.776] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.776] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0284.777] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.778] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0284.778] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba448 [0284.779] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.779] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0284.779] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.779] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0284.779] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.780] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0284.780] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0284.780] FindNextFileW (in: hFindFile=0xbba448, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0284.780] FindClose (in: hFindFile=0xbba448 | out: hFindFile=0xbba448) returned 1 [0284.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba548 [0284.780] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.780] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0284.780] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc08 [0284.780] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0xc98c88 [0284.781] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0284.781] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.784] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.785] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.786] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.787] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.788] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.789] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99418 [0284.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99418 | out: hHeap=0x2750000) returned 1 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bc28 [0284.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bc28 | out: hHeap=0x2750000) returned 1 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.790] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.790] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.790] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0284.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.791] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0284.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0284.792] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.792] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xcac, lpOverlapped=0x0) returned 1 [0284.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff354, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xcb0, lpOverlapped=0x0) returned 1 [0284.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.793] CloseHandle (hObject=0x1f0) returned 1 [0284.793] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.793] SetEndOfFile (hFile=0x1e0) returned 1 [0284.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.vhd")) returned 1 [0284.795] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0284.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bb28 [0284.795] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x4e) returned 0xc99100 [0284.795] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0284.795] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.804] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ce0 [0284.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ce0 | out: hHeap=0x2750000) returned 1 [0284.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bcd8 [0284.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bcd8 | out: hHeap=0x2750000) returned 1 [0284.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.805] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0284.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0284.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0284.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0284.806] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x28, lpOverlapped=0x0) returned 1 [0284.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffd8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x30, lpOverlapped=0x0) returned 1 [0284.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.809] CloseHandle (hObject=0x1f0) returned 1 [0284.809] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.809] SetEndOfFile (hFile=0x1e0) returned 1 [0284.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.vhd")) returned 1 [0284.814] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0284.815] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.816] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0284.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb78 [0284.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb78 | out: hHeap=0x2750000) returned 1 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.821] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.821] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.821] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0284.822] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.822] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0284.823] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0284.823] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.823] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.823] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.823] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2e, lpOverlapped=0x0) returned 1 [0284.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffffd2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x30, lpOverlapped=0x0) returned 1 [0284.825] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.826] CloseHandle (hObject=0x1f0) returned 1 [0284.826] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.826] SetEndOfFile (hFile=0x1e0) returned 1 [0284.827] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.vhd")) returned 1 [0284.827] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0284.827] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.834] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.836] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.837] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.838] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.839] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.840] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.841] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99158 [0284.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99158 | out: hHeap=0x2750000) returned 1 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bc28 [0284.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bc28 | out: hHeap=0x2750000) returned 1 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.842] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.842] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.842] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0284.843] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.843] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758588 [0284.843] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.843] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758588 | out: hHeap=0x2750000) returned 1 [0284.845] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0284.845] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.846] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x210, lpOverlapped=0x0) returned 1 [0284.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffdf0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x210, lpOverlapped=0x0) returned 1 [0284.846] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.848] CloseHandle (hObject=0x1f0) returned 1 [0284.848] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.848] SetEndOfFile (hFile=0x1e0) returned 1 [0284.848] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.vhd")) returned 1 [0284.849] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0284.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.850] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.852] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.853] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.854] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.855] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.856] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.857] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.858] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ff8 [0284.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ff8 | out: hHeap=0x2750000) returned 1 [0284.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bbc8 [0284.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.858] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bbc8 | out: hHeap=0x2750000) returned 1 [0284.858] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.859] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.859] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0284.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.859] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0284.859] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.859] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0284.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0284.860] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.860] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.860] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.861] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.862] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.863] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.864] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.864] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.865] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.865] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.866] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.867] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x19bd, lpOverlapped=0x0) returned 1 [0284.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe643, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x19c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x19c0, lpOverlapped=0x0) returned 1 [0284.867] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.868] CloseHandle (hObject=0x1f0) returned 1 [0284.868] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.868] SetEndOfFile (hFile=0x1e0) returned 1 [0284.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.vhd")) returned 1 [0284.869] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0284.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.869] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.871] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.872] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.873] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.874] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.875] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.876] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.877] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0284.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0284.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.878] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.878] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.878] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0284.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.879] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0284.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0284.880] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.880] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.880] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.881] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.882] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.882] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.883] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.883] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.884] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.885] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.886] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.886] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.887] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.888] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.888] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.893] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.893] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.894] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.894] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.895] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.895] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.896] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x171c, lpOverlapped=0x0) returned 1 [0284.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe8e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1720, lpOverlapped=0x0) returned 1 [0284.896] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.897] CloseHandle (hObject=0x1f0) returned 1 [0284.897] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.897] SetEndOfFile (hFile=0x1e0) returned 1 [0284.898] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.vhd")) returned 1 [0284.899] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0284.899] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.899] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.899] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.901] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cee0 [0284.906] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d058 [0284.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc994c8 [0284.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc994c8 | out: hHeap=0x2750000) returned 1 [0284.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d1c0 [0284.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb98 [0284.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d1c0 | out: hHeap=0x2750000) returned 1 [0284.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb98 | out: hHeap=0x2750000) returned 1 [0284.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.907] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.907] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0284.907] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d058 [0284.908] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0284.908] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.908] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0284.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0284.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d058 [0284.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d058 | out: hHeap=0x2750000) returned 1 [0284.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cee0 | out: hHeap=0x2750000) returned 1 [0284.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.909] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x3bb, lpOverlapped=0x0) returned 1 [0284.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc45, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x3c0, lpOverlapped=0x0) returned 1 [0284.909] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.910] CloseHandle (hObject=0x1f0) returned 1 [0284.910] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.910] SetEndOfFile (hFile=0x1e0) returned 1 [0284.910] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.vhd" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.vhd")) returned 1 [0284.911] FindNextFileW (in: hFindFile=0xbba548, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0284.911] FindClose (in: hFindFile=0xbba548 | out: hFindFile=0xbba548) returned 1 [0284.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbba008 [0284.912] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.912] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0284.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bbf8 [0284.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5c) returned 0xc950b8 [0284.912] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0284.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bb88 [0284.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5e) returned 0xc95120 [0284.912] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0284.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc18 [0284.912] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x74) returned 0xc9cee0 [0284.913] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bbe8 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc9c3e8 [0284.913] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc28 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc93d78 [0284.913] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc58 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x66) returned 0xc9c0d8 [0284.913] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc88 [0284.913] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc9c148 [0284.913] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc38 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc93bf8 [0284.914] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bcd8 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x5a) returned 0xc952c0 [0284.914] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc98 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x60) returned 0xc95460 [0284.914] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bb98 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x58) returned 0xc93a18 [0284.914] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc78 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x64) returned 0xc9c1b8 [0284.914] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bb48 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x62) returned 0xc9c458 [0284.914] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0284.914] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x8) returned 0xc9bc68 [0284.915] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x56) returned 0xc93cb8 [0284.915] FindNextFileW (in: hFindFile=0xbba008, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0284.915] FindClose (in: hFindFile=0xbba008 | out: hFindFile=0xbba008) returned 1 [0284.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xbb9e88 [0284.918] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.920] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0284.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.930] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.931] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.932] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.933] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.934] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.935] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.936] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.937] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.938] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.939] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0284.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0284.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0284.940] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0284.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0284.940] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0284.940] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0284.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0284.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0284.941] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.941] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0284.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0284.941] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0284.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.942] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0284.943] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0284.943] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0284.943] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.943] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0284.943] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.943] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.945] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.946] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.946] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.947] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.948] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.948] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.949] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.949] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.950] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.950] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.951] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.952] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.952] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.953] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.953] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.954] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.955] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.955] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.955] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.956] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.956] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.957] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.958] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.958] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.959] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.959] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.960] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.960] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.961] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.961] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.962] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.962] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.963] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.963] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.964] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.964] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.965] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.965] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.966] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.967] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.967] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.968] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.968] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.969] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.970] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0284.970] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0284.971] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x91c, lpOverlapped=0x0) returned 1 [0284.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff6e4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x920, lpOverlapped=0x0) returned 1 [0284.971] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.972] CloseHandle (hObject=0x1f0) returned 1 [0284.972] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.972] SetEndOfFile (hFile=0x1e0) returned 1 [0284.974] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0284.975] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0284.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.975] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.975] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.977] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.978] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.979] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.980] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.981] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.982] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.983] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.984] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.985] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.986] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0284.987] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0284.987] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0284.987] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0284.987] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0284.987] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0284.987] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.987] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0284.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0284.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0284.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.988] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0284.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0284.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0284.988] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0284.988] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.989] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0284.989] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0284.989] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0284.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0284.990] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0284.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.990] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5fd, lpOverlapped=0x0) returned 1 [0284.990] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa03, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x600, lpOverlapped=0x0) returned 1 [0284.991] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0284.991] CloseHandle (hObject=0x1f0) returned 1 [0284.992] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0284.992] SetEndOfFile (hFile=0x1e0) returned 1 [0284.992] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0284.993] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0284.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0284.995] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0284.995] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0284.997] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.998] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0284.999] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.000] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.001] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.002] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.003] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.004] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc994c8 [0285.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc994c8 | out: hHeap=0x2750000) returned 1 [0285.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.004] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bbc8 [0285.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.004] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bbc8 | out: hHeap=0x2750000) returned 1 [0285.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.005] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0285.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.005] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0285.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.005] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0285.006] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0285.006] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.006] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.006] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.006] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.007] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.009] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.010] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.011] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.011] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.012] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.013] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.013] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.014] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.014] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.015] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.016] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.017] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.017] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.018] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.018] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.019] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.020] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.020] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.021] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.021] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.022] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.022] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.023] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.023] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.024] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.024] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.025] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.025] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.027] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.028] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.028] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.029] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.029] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.030] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.030] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.031] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.031] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.032] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.032] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.033] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.033] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.034] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.034] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.035] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.035] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.035] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.036] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.036] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.037] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.038] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.038] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.039] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.040] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.041] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.041] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.042] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.043] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.044] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.045] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.046] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.065] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.066] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.070] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.071] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.071] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.072] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.072] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.073] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.073] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.074] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.074] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.075] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.075] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.076] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.076] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.076] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.077] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.077] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.077] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.078] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.078] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.079] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.079] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.079] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.080] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.080] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.080] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.080] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.081] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.081] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.082] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.083] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.083] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.083] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.084] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.084] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.085] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.085] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.086] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.086] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.087] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.087] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.088] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.088] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.089] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.090] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.090] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.091] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.091] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.092] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.092] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.093] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.094] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.095] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.096] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.097] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.098] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1863, lpOverlapped=0x0) returned 1 [0285.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe79d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1870, lpOverlapped=0x0) returned 1 [0285.100] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.101] CloseHandle (hObject=0x1f0) returned 1 [0285.101] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.101] SetEndOfFile (hFile=0x1e0) returned 1 [0285.103] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.104] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0285.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.105] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.107] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.108] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.109] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.109] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.109] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.109] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.109] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.109] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.110] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.111] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.112] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.112] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.112] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.112] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.112] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.112] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.113] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.114] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.115] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.116] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.117] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.117] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ce0 [0285.118] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ce0 | out: hHeap=0x2750000) returned 1 [0285.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.118] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.118] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.118] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.118] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.119] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.119] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.119] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0285.119] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.119] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0285.119] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.119] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0285.121] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0285.121] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.121] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.121] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.121] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.122] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.123] CloseHandle (hObject=0x1f0) returned 1 [0285.123] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.123] SetEndOfFile (hFile=0x1e0) returned 1 [0285.125] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.126] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0285.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.128] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.130] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.131] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.132] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.133] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.134] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.135] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.136] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.137] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0285.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0285.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.138] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.138] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.139] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92bd8 [0285.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.139] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0285.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.139] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0285.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92bd8 | out: hHeap=0x2750000) returned 1 [0285.140] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.140] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.140] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.142] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.142] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.144] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.145] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.147] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.148] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.149] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.151] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.152] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.152] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.153] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.154] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.154] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.155] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.155] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.156] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.156] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.157] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.157] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.158] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.159] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.160] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.161] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.161] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.162] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.162] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.163] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.163] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.164] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.165] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.166] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.167] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.168] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.169] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.170] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.175] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.176] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.177] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.178] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.179] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.180] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.181] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.181] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.182] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.183] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.186] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.187] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.188] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1381, lpOverlapped=0x0) returned 1 [0285.189] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec7f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1390, lpOverlapped=0x0) returned 1 [0285.190] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.191] CloseHandle (hObject=0x1f0) returned 1 [0285.191] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.191] SetEndOfFile (hFile=0x1e0) returned 1 [0285.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.194] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0285.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.195] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.198] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.199] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.200] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.201] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.202] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.203] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.204] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0285.206] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0285.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.206] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bbb8 [0285.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bbb8 | out: hHeap=0x2750000) returned 1 [0285.207] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.207] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.207] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.207] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0285.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.208] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0285.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.208] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0285.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0285.209] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.209] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.209] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.210] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.210] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.211] CloseHandle (hObject=0x1f0) returned 1 [0285.211] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.211] SetEndOfFile (hFile=0x1e0) returned 1 [0285.212] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.213] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0285.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.214] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.216] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.217] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.218] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.252] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.253] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.254] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.255] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.256] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.257] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.258] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0285.258] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0285.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.258] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb68 [0285.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb68 | out: hHeap=0x2750000) returned 1 [0285.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.259] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.259] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0285.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.259] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0285.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.260] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0285.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0285.262] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.262] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.271] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.271] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.272] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.272] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.273] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.273] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.274] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.274] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.275] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.275] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.276] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.276] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.277] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.278] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.279] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.279] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.280] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1f10, lpOverlapped=0x0) returned 1 [0285.281] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe0f0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1f10, lpOverlapped=0x0) returned 1 [0285.281] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.282] CloseHandle (hObject=0x1f0) returned 1 [0285.282] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.282] SetEndOfFile (hFile=0x1e0) returned 1 [0285.282] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.283] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0285.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.284] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.285] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.286] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.287] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.288] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.289] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.290] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.291] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.292] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99158 [0285.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99158 | out: hHeap=0x2750000) returned 1 [0285.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.293] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.293] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0285.293] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.294] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0285.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.294] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0285.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0285.295] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.295] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.296] CloseHandle (hObject=0x1f0) returned 1 [0285.297] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.297] SetEndOfFile (hFile=0x1e0) returned 1 [0285.297] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.298] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0285.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.299] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.303] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.304] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.305] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.306] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.307] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.309] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99578 [0285.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99578 | out: hHeap=0x2750000) returned 1 [0285.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.310] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.310] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.310] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0285.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.311] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0285.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.311] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0285.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0285.313] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.313] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.313] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.313] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.317] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.318] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.319] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.319] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.320] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.322] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.322] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.323] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.323] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.326] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.326] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.327] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.327] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.328] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.328] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.329] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.329] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.331] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.331] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.332] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.332] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.333] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.333] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.334] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.334] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.335] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.335] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.336] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.336] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.336] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.338] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.338] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.338] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.339] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.339] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.339] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.340] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.340] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.341] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.341] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.342] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.342] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.343] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.345] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.345] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.346] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.346] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.349] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.355] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.355] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.356] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.356] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.357] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.357] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.359] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.359] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.360] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.361] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.361] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.362] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.362] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.362] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.363] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.363] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.364] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.364] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.365] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.365] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.366] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.367] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.367] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.368] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.368] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.369] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.369] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.369] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.370] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.370] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.371] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.372] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.373] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.374] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.375] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.375] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.375] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.376] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.376] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.377] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.380] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.380] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.381] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.381] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.382] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.382] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.383] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.384] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.384] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.386] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.386] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.387] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.388] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.388] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.389] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.389] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.390] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.390] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.392] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.393] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.394] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.394] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.394] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.394] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.395] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.395] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.396] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.396] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.396] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.397] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.397] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.398] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.399] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.399] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.400] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.400] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.400] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.401] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.404] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.404] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.405] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.406] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.408] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.408] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.409] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.410] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.410] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.411] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.411] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.412] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.412] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.413] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.413] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.414] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.415] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.415] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.416] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.416] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.416] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.417] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.417] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.418] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.418] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.419] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.420] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.420] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.421] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.421] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.422] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.422] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.423] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.423] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.427] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.427] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.428] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.428] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.431] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.431] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.431] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.432] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.432] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.433] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xa4e, lpOverlapped=0x0) returned 1 [0285.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff5b2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xa50, lpOverlapped=0x0) returned 1 [0285.433] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.434] CloseHandle (hObject=0x1f0) returned 1 [0285.434] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.434] SetEndOfFile (hFile=0x1e0) returned 1 [0285.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.443] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0285.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.444] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.449] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.450] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.451] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.452] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.453] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.458] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.459] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.459] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0285.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0285.459] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.459] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.459] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.459] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.460] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.460] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.460] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0285.460] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.460] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0285.460] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.460] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0285.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0285.462] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.462] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.462] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.463] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.464] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.465] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.465] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xbfb, lpOverlapped=0x0) returned 1 [0285.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff405, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xc00, lpOverlapped=0x0) returned 1 [0285.466] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.466] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.467] CloseHandle (hObject=0x1f0) returned 1 [0285.467] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.467] SetEndOfFile (hFile=0x1e0) returned 1 [0285.468] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.469] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0285.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.474] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.475] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.476] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.477] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.478] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.479] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.480] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.481] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.482] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.483] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.483] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.483] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.484] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ce0 [0285.484] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ce0 | out: hHeap=0x2750000) returned 1 [0285.484] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.484] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.485] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.485] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.485] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.485] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.485] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.485] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.485] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0285.486] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.486] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0285.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.486] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0285.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0285.487] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.487] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.488] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.488] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.495] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.497] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.499] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.500] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.501] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.501] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.502] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.502] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.502] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.503] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.504] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.504] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.505] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.505] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.506] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.506] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.507] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.507] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.508] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.508] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.509] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.509] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.510] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.515] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.515] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.516] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.516] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.517] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.517] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.518] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.518] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.519] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.519] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.520] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.520] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.521] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.521] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.522] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.522] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.523] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.523] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.525] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.526] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.527] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.527] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.528] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.528] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.529] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.530] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.530] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.531] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.531] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.532] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.532] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.533] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.533] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.534] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.534] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.535] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.536] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.538] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.539] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.540] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.541] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.542] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.545] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.545] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.546] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.548] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.549] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.550] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.551] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.551] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.552] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.552] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.553] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.553] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.554] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.554] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.555] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.555] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.556] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.556] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.557] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.557] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.558] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.558] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.561] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.561] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.562] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.563] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.564] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5e3, lpOverlapped=0x0) returned 1 [0285.565] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa1d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.565] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x5f0, lpOverlapped=0x0) returned 1 [0285.566] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.566] CloseHandle (hObject=0x1f0) returned 1 [0285.566] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.566] SetEndOfFile (hFile=0x1e0) returned 1 [0285.568] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.569] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0285.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.570] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.574] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.575] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.576] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.577] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.578] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.581] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.582] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.583] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.584] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.585] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.586] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.586] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0285.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0285.587] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.587] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb78 [0285.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb78 | out: hHeap=0x2750000) returned 1 [0285.587] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.587] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.588] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.588] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0285.588] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.588] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0285.588] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.588] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0285.589] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0285.589] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.589] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.589] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.589] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.590] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.590] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.591] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.591] CloseHandle (hObject=0x1f0) returned 1 [0285.591] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.591] SetEndOfFile (hFile=0x1e0) returned 1 [0285.603] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.604] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0285.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.605] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.607] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.608] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.609] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.610] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.611] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.612] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.613] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.614] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99520 [0285.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99520 | out: hHeap=0x2750000) returned 1 [0285.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.614] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.614] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.615] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0285.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.615] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0285.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.615] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0285.617] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0285.617] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.617] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.617] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.617] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.617] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.618] CloseHandle (hObject=0x1f0) returned 1 [0285.618] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.618] SetEndOfFile (hFile=0x1e0) returned 1 [0285.618] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.619] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0285.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.620] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.622] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.623] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0285.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0285.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.630] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.630] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.631] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e58 [0285.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.631] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0285.631] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.632] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0285.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e58 | out: hHeap=0x2750000) returned 1 [0285.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x863, lpOverlapped=0x0) returned 1 [0285.633] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff79d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x870, lpOverlapped=0x0) returned 1 [0285.634] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.634] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.635] CloseHandle (hObject=0x1f0) returned 1 [0285.635] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.635] SetEndOfFile (hFile=0x1e0) returned 1 [0285.635] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.641] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0285.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.652] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.653] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.654] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.655] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.656] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.657] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.658] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.659] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.660] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.661] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99470 [0285.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99470 | out: hHeap=0x2750000) returned 1 [0285.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.662] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.662] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.663] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.663] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0285.663] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.663] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0285.663] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.663] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0285.664] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0285.664] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.664] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.665] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x863, lpOverlapped=0x0) returned 1 [0285.665] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff79d, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.665] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x870, lpOverlapped=0x0) returned 1 [0285.666] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.666] CloseHandle (hObject=0x1f0) returned 1 [0285.666] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.666] SetEndOfFile (hFile=0x1e0) returned 1 [0285.667] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.668] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0285.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.670] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.689] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.690] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.691] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.692] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.693] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.698] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.698] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.698] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0285.698] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0285.698] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.698] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.699] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0285.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.699] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0285.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.699] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0285.700] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0285.700] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.701] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.701] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.715] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.715] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.717] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.717] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.719] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.720] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.720] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.722] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.723] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.724] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.725] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.726] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.727] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.728] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.729] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.729] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.730] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.732] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.736] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.737] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.738] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.738] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.739] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.740] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.740] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.741] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.742] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.743] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.743] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.744] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.744] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.745] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xb4b, lpOverlapped=0x0) returned 1 [0285.745] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff4b5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xb50, lpOverlapped=0x0) returned 1 [0285.746] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.746] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.747] CloseHandle (hObject=0x1f0) returned 1 [0285.747] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.747] SetEndOfFile (hFile=0x1e0) returned 1 [0285.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.749] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0285.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.750] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.751] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.757] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.758] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.759] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.760] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.769] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.770] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99158 [0285.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99158 | out: hHeap=0x2750000) returned 1 [0285.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bba8 [0285.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bba8 | out: hHeap=0x2750000) returned 1 [0285.771] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.771] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.772] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0285.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.772] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758240 [0285.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.772] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758240 | out: hHeap=0x2750000) returned 1 [0285.773] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0285.773] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.774] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.774] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.774] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.774] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.775] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.775] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.775] CloseHandle (hObject=0x1f0) returned 1 [0285.775] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.776] SetEndOfFile (hFile=0x1e0) returned 1 [0285.787] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.788] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0285.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.792] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.793] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.794] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.795] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.796] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.797] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.798] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.799] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.800] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.801] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.802] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.803] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.803] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0285.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0285.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.804] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.804] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.805] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.805] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0285.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.805] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758c18 [0285.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.806] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758c18 | out: hHeap=0x2750000) returned 1 [0285.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0285.807] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.807] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0285.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0285.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0285.809] CloseHandle (hObject=0x1f0) returned 1 [0285.809] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.809] SetEndOfFile (hFile=0x1e0) returned 1 [0285.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0285.811] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0285.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0285.811] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.902] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.903] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0285.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0285.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0285.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0285.909] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0285.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0285.909] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0285.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0285.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0285.910] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.910] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0285.910] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0285.910] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0285.910] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0285.910] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0285.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0285.911] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0285.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0285.911] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0285.912] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0285.912] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.913] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.914] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.914] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.915] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.915] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.916] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.916] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.917] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.918] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.918] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.919] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.920] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.920] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.921] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.921] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.922] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.922] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.923] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.923] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.924] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.925] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.925] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.926] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.926] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.927] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.927] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.928] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.928] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.929] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.929] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.930] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.930] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.931] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.931] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.933] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.933] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.934] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.934] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.935] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.936] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.937] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0285.937] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0285.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0285.938] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.046] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.047] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.047] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.048] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.048] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.049] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.049] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.050] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.050] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.051] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.052] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.052] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.053] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.054] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.055] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.056] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1d21, lpOverlapped=0x0) returned 1 [0286.057] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe2df, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1d30, lpOverlapped=0x0) returned 1 [0286.099] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.099] CloseHandle (hObject=0x1f0) returned 1 [0286.099] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.100] SetEndOfFile (hFile=0x1e0) returned 1 [0286.139] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.140] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0286.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.141] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.143] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.144] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.145] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.146] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.147] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.148] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.149] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.150] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0286.150] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.150] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.150] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.150] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.150] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.150] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.150] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0286.150] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.151] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0286.167] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0286.170] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.171] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.171] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.172] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1a41, lpOverlapped=0x0) returned 1 [0286.173] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe5bf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1a50, lpOverlapped=0x0) returned 1 [0286.174] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.174] CloseHandle (hObject=0x1f0) returned 1 [0286.174] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.175] SetEndOfFile (hFile=0x1e0) returned 1 [0286.175] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.176] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0286.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.203] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.205] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.206] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.207] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.208] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.209] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.210] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.211] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.212] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e98 [0286.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e98 | out: hHeap=0x2750000) returned 1 [0286.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.212] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.212] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.213] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.213] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc93038 [0286.213] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.213] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758470 [0286.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.213] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758470 | out: hHeap=0x2750000) returned 1 [0286.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc93038 | out: hHeap=0x2750000) returned 1 [0286.241] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.241] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.241] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.244] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.248] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.248] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.249] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.250] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.251] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.251] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.252] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.253] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.253] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.254] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.254] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.255] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.255] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.256] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.256] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.256] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.256] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.257] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.257] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.258] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.258] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.259] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.259] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.260] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.260] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.260] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.261] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.261] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.262] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.262] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.262] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.264] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.264] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.264] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.265] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.266] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.266] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.267] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.267] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.267] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.268] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.268] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.268] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.269] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.269] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.270] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.270] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.288] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.288] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.289] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.289] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.290] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.290] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.291] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.291] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.291] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.292] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.294] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.295] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.295] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.296] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.296] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.297] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.297] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.298] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x13e5, lpOverlapped=0x0) returned 1 [0286.298] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffec1b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x13f0, lpOverlapped=0x0) returned 1 [0286.299] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.299] CloseHandle (hObject=0x1f0) returned 1 [0286.299] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.300] SetEndOfFile (hFile=0x1e0) returned 1 [0286.304] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.305] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0286.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.305] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.306] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.308] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.309] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.310] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.311] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.312] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.313] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.314] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.315] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.316] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.317] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.318] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.319] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.319] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98d90 [0286.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98d90 | out: hHeap=0x2750000) returned 1 [0286.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.320] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bba8 [0286.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.320] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bba8 | out: hHeap=0x2750000) returned 1 [0286.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.321] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.321] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0286.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.321] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0286.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.322] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0286.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0286.323] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.323] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.324] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.325] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.325] CloseHandle (hObject=0x1f0) returned 1 [0286.326] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.326] SetEndOfFile (hFile=0x1e0) returned 1 [0286.326] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.327] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0286.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.330] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.330] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.332] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.333] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.334] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.335] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.336] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.337] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.338] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.339] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.340] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.341] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.342] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.343] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.343] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0286.343] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0286.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.344] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.344] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0286.344] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.345] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0286.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.345] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0286.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0286.346] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.346] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.347] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.347] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.348] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.348] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.349] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.350] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.351] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.351] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.352] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.353] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.353] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.354] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x1dea, lpOverlapped=0x0) returned 1 [0286.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe216, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x1df0, lpOverlapped=0x0) returned 1 [0286.354] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.355] CloseHandle (hObject=0x1f0) returned 1 [0286.355] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.356] SetEndOfFile (hFile=0x1e0) returned 1 [0286.356] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.357] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0286.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.358] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.358] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.360] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.361] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.362] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.363] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.364] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.365] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.366] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.367] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.368] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.369] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.370] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.371] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.372] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.373] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.373] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0286.373] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0286.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bba8 [0286.374] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.374] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.374] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bba8 | out: hHeap=0x2750000) returned 1 [0286.374] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.374] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.374] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0286.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.375] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0286.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.375] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0286.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0286.377] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.377] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.377] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.378] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.378] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.379] CloseHandle (hObject=0x1f0) returned 1 [0286.379] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.379] SetEndOfFile (hFile=0x1e0) returned 1 [0286.383] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.384] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0286.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.385] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.385] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.387] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.388] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.389] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.390] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.391] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.392] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.393] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.394] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.395] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.396] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.397] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.398] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.398] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.398] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.399] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99050 [0286.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99050 | out: hHeap=0x2750000) returned 1 [0286.399] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.399] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.399] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.399] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.400] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0286.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.400] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0286.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.400] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0286.401] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0286.402] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.402] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.402] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.402] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.403] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.404] CloseHandle (hObject=0x1f0) returned 1 [0286.404] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.405] SetEndOfFile (hFile=0x1e0) returned 1 [0286.405] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.406] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0286.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.407] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.409] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.410] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.411] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.412] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.413] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.414] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.415] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.416] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.417] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.418] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.419] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.420] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0286.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0286.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.421] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bbb8 [0286.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.421] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bbb8 | out: hHeap=0x2750000) returned 1 [0286.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.422] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0286.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.422] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0286.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.422] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0286.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0286.423] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.423] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.424] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.424] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.425] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x400, lpOverlapped=0x0) returned 1 [0286.425] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffc00, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x400, lpOverlapped=0x0) returned 1 [0286.426] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.427] CloseHandle (hObject=0x1f0) returned 1 [0286.427] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.427] SetEndOfFile (hFile=0x1e0) returned 1 [0286.427] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.429] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0286.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.429] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.429] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.431] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.432] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.433] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.434] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.435] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.436] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.437] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.438] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.439] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.440] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.441] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.442] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.442] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.442] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98fa0 [0286.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98fa0 | out: hHeap=0x2750000) returned 1 [0286.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.443] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.443] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.444] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.444] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ea8 [0286.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.444] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0286.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.445] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0286.446] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ea8 | out: hHeap=0x2750000) returned 1 [0286.446] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.446] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.446] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.446] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.447] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.447] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.448] CloseHandle (hObject=0x1f0) returned 1 [0286.448] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.448] SetEndOfFile (hFile=0x1e0) returned 1 [0286.451] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.452] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0286.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.452] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.453] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.454] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.455] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.456] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.457] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.458] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.459] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.460] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.461] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.462] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.463] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.464] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.465] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.465] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98de8 [0286.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98de8 | out: hHeap=0x2750000) returned 1 [0286.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.466] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.466] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.467] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc929f8 [0286.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.467] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758010 [0286.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.467] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758010 | out: hHeap=0x2750000) returned 1 [0286.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc929f8 | out: hHeap=0x2750000) returned 1 [0286.468] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.468] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.468] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.470] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.471] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.471] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.472] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.472] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.473] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.473] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.475] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.475] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.476] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.476] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.477] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.478] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.479] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.479] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.479] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.481] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.482] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.482] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.483] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.483] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.484] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.485] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.485] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.486] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.487] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.487] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.490] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.490] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.491] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.491] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.492] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.492] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.493] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.493] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.494] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.494] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.495] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.495] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.495] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.496] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.496] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.497] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.497] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.498] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.498] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.498] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.498] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.498] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.499] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.499] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.499] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.500] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.500] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.501] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.501] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.501] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.501] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.502] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x18a8, lpOverlapped=0x0) returned 1 [0286.502] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe758, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.502] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x18b0, lpOverlapped=0x0) returned 1 [0286.503] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.503] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.503] CloseHandle (hObject=0x1f0) returned 1 [0286.503] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.504] SetEndOfFile (hFile=0x1e0) returned 1 [0286.508] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.509] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0286.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.510] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.512] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.513] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.514] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.515] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.516] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.517] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.518] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.519] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.520] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.521] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0286.521] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0286.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.521] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.522] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92e08 [0286.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.522] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0286.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.522] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0286.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92e08 | out: hHeap=0x2750000) returned 1 [0286.523] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.523] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.524] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.524] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.525] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.525] CloseHandle (hObject=0x1f0) returned 1 [0286.525] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.525] SetEndOfFile (hFile=0x1e0) returned 1 [0286.525] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.528] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0286.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.529] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.531] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.532] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.533] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.534] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.535] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.536] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.537] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.538] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.539] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.539] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99310 [0286.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99310 | out: hHeap=0x2750000) returned 1 [0286.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bbb8 [0286.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bbb8 | out: hHeap=0x2750000) returned 1 [0286.540] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.540] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.541] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.541] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0286.541] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.541] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0286.541] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.541] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0286.542] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0286.542] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.542] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.543] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x5aa, lpOverlapped=0x0) returned 1 [0286.543] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.543] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x5b0, lpOverlapped=0x0) returned 1 [0286.544] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.544] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.544] CloseHandle (hObject=0x1f0) returned 1 [0286.545] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.545] SetEndOfFile (hFile=0x1e0) returned 1 [0286.545] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.546] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0286.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.547] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.549] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.550] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.551] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.552] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.553] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.554] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.555] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.556] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99208 [0286.556] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99208 | out: hHeap=0x2750000) returned 1 [0286.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.556] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.557] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.557] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a48 [0286.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.557] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27587b8 [0286.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.558] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27587b8 | out: hHeap=0x2750000) returned 1 [0286.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a48 | out: hHeap=0x2750000) returned 1 [0286.559] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.559] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.559] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.559] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.560] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.560] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.560] CloseHandle (hObject=0x1f0) returned 1 [0286.560] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.561] SetEndOfFile (hFile=0x1e0) returned 1 [0286.561] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.562] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0286.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.562] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.567] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.568] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.569] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.570] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.571] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.572] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.573] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.588] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.589] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.590] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.591] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.592] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.593] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.594] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.594] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.594] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98d38 [0286.594] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98d38 | out: hHeap=0x2750000) returned 1 [0286.594] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.594] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb68 [0286.595] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.595] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.595] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb68 | out: hHeap=0x2750000) returned 1 [0286.595] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.595] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.595] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.596] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92ef8 [0286.596] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.596] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758b00 [0286.596] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.596] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758b00 | out: hHeap=0x2750000) returned 1 [0286.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92ef8 | out: hHeap=0x2750000) returned 1 [0286.597] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.597] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.597] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xeaa, lpOverlapped=0x0) returned 1 [0286.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff156, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xeb0, lpOverlapped=0x0) returned 1 [0286.598] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.599] CloseHandle (hObject=0x1f0) returned 1 [0286.599] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.599] SetEndOfFile (hFile=0x1e0) returned 1 [0286.617] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.618] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0286.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.618] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.624] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.625] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.626] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.627] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.628] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.629] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.630] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.631] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.632] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0286.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0286.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.633] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.633] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.634] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92f98 [0286.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.634] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27589e8 [0286.634] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.635] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27589e8 | out: hHeap=0x2750000) returned 1 [0286.635] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92f98 | out: hHeap=0x2750000) returned 1 [0286.636] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.641] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.641] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.641] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.642] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.642] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.642] CloseHandle (hObject=0x1f0) returned 1 [0286.642] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.643] SetEndOfFile (hFile=0x1e0) returned 1 [0286.680] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.681] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0286.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.682] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.694] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.695] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.696] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.697] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.698] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.700] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.701] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.702] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.703] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.704] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.705] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.706] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.707] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.707] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.708] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.708] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc991b0 [0286.708] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc991b0 | out: hHeap=0x2750000) returned 1 [0286.708] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.708] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.708] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.708] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.708] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.709] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.709] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.709] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.709] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b88 [0286.709] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.709] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x27588d0 [0286.709] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.710] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x27588d0 | out: hHeap=0x2750000) returned 1 [0286.710] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b88 | out: hHeap=0x2750000) returned 1 [0286.711] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.711] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.711] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.711] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.712] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.712] CloseHandle (hObject=0x1f0) returned 1 [0286.713] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.713] SetEndOfFile (hFile=0x1e0) returned 1 [0286.713] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.715] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0286.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.716] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.718] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.719] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.720] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.721] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.722] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.723] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.724] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.725] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.726] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.727] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.728] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0286.728] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0286.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.728] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.729] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.729] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.731] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c78 [0286.731] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.732] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0286.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.732] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0286.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c78 | out: hHeap=0x2750000) returned 1 [0286.733] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.733] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.733] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.734] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.735] CloseHandle (hObject=0x1f0) returned 1 [0286.735] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.735] SetEndOfFile (hFile=0x1e0) returned 1 [0286.741] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.742] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0286.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.742] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.744] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.745] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.746] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.747] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.748] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.749] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.750] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.751] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.752] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.753] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.754] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.755] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.756] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98ce0 [0286.756] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98ce0 | out: hHeap=0x2750000) returned 1 [0286.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.756] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.757] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.757] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.757] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92a98 [0286.758] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.758] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2757ef8 [0286.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.758] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2757ef8 | out: hHeap=0x2750000) returned 1 [0286.759] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92a98 | out: hHeap=0x2750000) returned 1 [0286.759] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.759] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.759] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.760] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.762] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.762] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.763] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.763] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.764] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.765] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.766] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.766] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.767] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.767] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.768] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.770] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.770] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.771] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.771] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.772] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.772] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.773] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.777] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.778] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.779] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.779] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.780] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.780] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.781] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.781] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.782] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.782] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.784] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.784] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.785] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.785] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.786] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.786] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.787] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.787] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.788] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.788] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.789] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.789] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.790] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.790] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.791] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.792] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.793] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.793] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.793] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.794] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.794] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.794] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.795] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.795] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.795] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.796] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.796] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.796] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.797] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.797] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.798] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.798] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.798] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.799] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.799] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.800] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.800] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.801] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.801] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.802] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.802] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.803] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.803] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.804] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.804] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.805] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.805] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.806] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.807] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.807] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.808] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x2000, lpOverlapped=0x0) returned 1 [0286.808] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xffffe000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x2000, lpOverlapped=0x0) returned 1 [0286.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xe56, lpOverlapped=0x0) returned 1 [0286.809] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff1aa, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xe60, lpOverlapped=0x0) returned 1 [0286.810] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.810] CloseHandle (hObject=0x1f0) returned 1 [0286.811] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.811] SetEndOfFile (hFile=0x1e0) returned 1 [0286.813] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.814] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0286.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.815] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.817] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.818] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.819] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.820] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.821] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.822] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.823] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.824] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.825] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.826] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.827] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.828] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.828] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc99680 [0286.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc99680 | out: hHeap=0x2750000) returned 1 [0286.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0286.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bb38 [0286.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0286.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bb38 | out: hHeap=0x2750000) returned 1 [0286.829] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.829] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.830] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0286.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92c28 [0286.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0286.830] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758d30 [0286.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.830] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758d30 | out: hHeap=0x2750000) returned 1 [0286.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92c28 | out: hHeap=0x2750000) returned 1 [0286.831] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0286.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0286.831] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0286.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0x4ed, lpOverlapped=0x0) returned 1 [0286.831] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffb13, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0x4f0, lpOverlapped=0x0) returned 1 [0286.832] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0286.832] CloseHandle (hObject=0x1f0) returned 1 [0286.833] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0286.833] SetEndOfFile (hFile=0x1e0) returned 1 [0286.833] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.vhd" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.vhd")) returned 1 [0286.834] FindNextFileW (in: hFindFile=0xbb9e88, lpFindFileData=0x7df380 | out: lpFindFileData=0x7df380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0286.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0286.835] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffffef8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0286.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x7da744, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesRead=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0286.883] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.904] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.905] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.906] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.907] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.908] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.909] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.910] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.911] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.912] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.913] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.914] SystemFunction036 (in: RandomBuffer=0x7d93a8, RandomBufferLength=0x4 | out: RandomBuffer=0x7d93a8) returned 1 [0286.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x170) returned 0xc9cf60 [0286.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x160) returned 0xc9d0d8 [0286.983] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x50) returned 0xc98e40 [0287.036] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc98e40 | out: hHeap=0x2750000) returned 1 [0287.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d240 [0287.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x2) returned 0xc9bba8 [0287.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0287.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d240 | out: hHeap=0x2750000) returned 1 [0287.037] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9bba8 | out: hHeap=0x2750000) returned 1 [0287.037] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0287.039] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0287.039] SystemFunction036 (in: RandomBuffer=0x7d86e0, RandomBufferLength=0x4 | out: RandomBuffer=0x7d86e0) returned 1 [0287.039] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x41) returned 0xc92b38 [0287.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x208) returned 0xc9d0d8 [0287.040] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x104) returned 0x2758128 [0287.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0287.040] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0x2758128 | out: hHeap=0x2750000) returned 1 [0287.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc92b38 | out: hHeap=0x2750000) returned 1 [0287.042] RtlAllocateHeap (HeapHandle=0x2750000, Flags=0x0, Size=0x100) returned 0xc9d0d8 [0287.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9d0d8 | out: hHeap=0x2750000) returned 1 [0287.042] HeapFree (in: hHeap=0x2750000, dwFlags=0x0, lpMem=0xc9cf60 | out: hHeap=0x2750000) returned 1 [0287.150] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0287.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x7dafd8, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x7da788, lpOverlapped=0x0 | out: lpBuffer=0x7dafd8*, lpNumberOfBytesRead=0x7da788*=0xd2f, lpOverlapped=0x0) returned 1 [0287.223] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0xfffff2d1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0287.224] WriteFile (in: hFile=0x1f0, lpBuffer=0x7dcfd8*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x7da78c, lpOverlapped=0x0 | out: lpBuffer=0x7dcfd8*, lpNumberOfBytesWritten=0x7da78c*=0xd30, lpOverlapped=0x0) returned 1 [0287.225] SetFilePointerEx (in: hFile=0x1f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0287.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7da744*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7da744*, lpNumberOfBytesWritten=0x7da740*=0x8, lpOverlapped=0x0) returned 1 [0287.225] WriteFile (in: hFile=0x1f0, lpBuffer=0x7df1e0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x7da740, lpOverlapped=0x0 | out: lpBuffer=0x7df1e0*, lpNumberOfBytesWritten=0x7da740*=0x100, lpOverlapped=0x0) returned 1 [0287.329] CloseHandle (hObject=0x1f0) returned 1 [0287.329] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 Thread: id = 2 os_tid = 0x1158 Thread: id = 3 os_tid = 0xafc [0145.171] GetCurrentProcess () returned 0xffffffff [0145.172] GetCurrentProcess () returned 0xffffffff Thread: id = 4 os_tid = 0xdf8 Thread: id = 144 os_tid = 0xce0 Thread: id = 146 os_tid = 0x11f8 Process: id = "2" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b981000" os_pid = "0xe54" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Active Directory Toplogy\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0x440 [0175.879] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.880] __set_app_type (_Type=0x1) [0175.880] __p__fmode () returned 0x776f3c14 [0175.880] __p__commode () returned 0x776f49ec [0175.880] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.880] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.881] SetThreadUILanguage (LangId=0x0) returned 0x3e0409 [0176.504] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.504] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.504] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.504] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.505] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.505] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.505] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.505] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.505] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.505] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.505] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.505] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.506] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x4604e8 [0176.512] OpenServiceW (hSCManager=0x4604e8, lpServiceName="Microsoft Exchange Active Directory Toplogy", dwDesiredAccess=0x20) returned 0x0 [0176.512] GetLastError () returned 0x424 [0176.513] _ultow (in: _Dest=0x424, _Radix=1506380 | out: _Dest=0x424) returned="1060" [0176.513] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.514] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x16fc28, nSize=0x2, Arguments=0x16fc40 | out: lpBuffer="拘Fﱨ\x16蕗Ġ\x01") returned 0x62 [0176.515] GetFileType (hFile=0x90) returned 0x2 [0176.515] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x16fc0c | out: lpMode=0x16fc0c) returned 1 [0176.755] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x4662d8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x16fc1c, lpReserved=0x0 | out: lpBuffer=0x4662d8*, lpNumberOfCharsWritten=0x16fc1c*=0x62) returned 1 [0176.980] LocalFree (hMem=0x4662d8) returned 0x0 [0176.980] LocalFree (hMem=0x0) returned 0x0 [0176.980] CloseServiceHandle (hSCObject=0x4604e8) returned 1 [0176.980] LocalFree (hMem=0x0) returned 0x0 [0176.980] exit (_Code=1060) Thread: id = 138 os_tid = 0x11b8 Process: id = "3" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x17011000" os_pid = "0x5b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Anti-spam Update\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 6 os_tid = 0xa80 [0176.097] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0176.097] __set_app_type (_Type=0x1) [0176.097] __p__fmode () returned 0x776f3c14 [0176.097] __p__commode () returned 0x776f49ec [0176.097] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0176.098] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0176.098] SetThreadUILanguage (LangId=0x0) returned 0x840409 [0176.704] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.704] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.704] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.704] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.704] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.704] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.704] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.704] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.704] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.704] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.704] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.705] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.705] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xac04e8 [0176.710] OpenServiceW (hSCManager=0xac04e8, lpServiceName="Microsoft Exchange Anti-spam Update", dwDesiredAccess=0x20) returned 0x0 [0176.711] GetLastError () returned 0x424 [0176.711] _ultow (in: _Dest=0x424, _Radix=7731836 | out: _Dest=0x424) returned="1060" [0176.711] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.712] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x75fa58, nSize=0x2, Arguments=0x75fa70 | out: lpBuffer="拀¬滛u蕗Ġ\x01") returned 0x62 [0176.713] GetFileType (hFile=0x90) returned 0x2 [0176.713] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x75fa3c | out: lpMode=0x75fa3c) returned 1 [0176.882] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xac62c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x75fa4c, lpReserved=0x0 | out: lpBuffer=0xac62c0*, lpNumberOfCharsWritten=0x75fa4c*=0x62) returned 1 [0177.078] LocalFree (hMem=0xac62c0) returned 0x0 [0177.078] LocalFree (hMem=0x0) returned 0x0 [0177.078] CloseServiceHandle (hSCObject=0xac04e8) returned 1 [0177.079] LocalFree (hMem=0x0) returned 0x0 [0177.079] exit (_Code=1060) Thread: id = 143 os_tid = 0x10e0 Process: id = "4" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b594000" os_pid = "0x648" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Compliance Audit\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0xf0 [0175.007] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.007] __set_app_type (_Type=0x1) [0175.007] __p__fmode () returned 0x776f3c14 [0175.007] __p__commode () returned 0x776f49ec [0175.007] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.007] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.008] SetThreadUILanguage (LangId=0x0) returned 0x6d0409 [0176.178] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.178] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.178] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.178] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.179] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.179] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.179] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.179] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.179] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.179] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.179] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.180] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.180] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xa604e8 [0176.217] OpenServiceW (hSCManager=0xa604e8, lpServiceName="Microsoft Exchange Compliance Audit", dwDesiredAccess=0x20) returned 0x0 [0176.218] GetLastError () returned 0x424 [0176.218] _ultow (in: _Dest=0x424, _Radix=8911740 | out: _Dest=0x424) returned="1060" [0176.218] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.220] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x87fb58, nSize=0x2, Arguments=0x87fb70 | out: lpBuffer="抸¦ﮘ\x87蕗Ġ\x01") returned 0x62 [0176.221] GetFileType (hFile=0x90) returned 0x2 [0176.221] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x87fb3c | out: lpMode=0x87fb3c) returned 1 [0176.593] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xa662b8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x87fb4c, lpReserved=0x0 | out: lpBuffer=0xa662b8*, lpNumberOfCharsWritten=0x87fb4c*=0x62) returned 1 [0176.863] LocalFree (hMem=0xa662b8) returned 0x0 [0176.863] LocalFree (hMem=0x0) returned 0x0 [0176.863] CloseServiceHandle (hSCObject=0xa604e8) returned 1 [0176.863] LocalFree (hMem=0x0) returned 0x0 [0176.863] exit (_Code=1060) Thread: id = 126 os_tid = 0x1140 Process: id = "5" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b597000" os_pid = "0x6e0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Compliance Service\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 8 os_tid = 0xea4 [0175.073] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.073] __set_app_type (_Type=0x1) [0175.073] __p__fmode () returned 0x776f3c14 [0175.073] __p__commode () returned 0x776f49ec [0175.073] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.073] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.074] SetThreadUILanguage (LangId=0x0) returned 0xc90409 [0175.547] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0175.547] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0175.547] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0175.547] _wcsicmp (_String1="stop", _String2="query") returned 2 [0175.547] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0175.547] _wcsicmp (_String1="stop", _String2="start") returned 14 [0175.548] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0175.548] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0175.548] _wcsicmp (_String1="stop", _String2="control") returned 16 [0175.548] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0175.548] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0175.548] ResolveDelayLoadedAPI () returned 0x7770c440 [0175.549] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x10e04e8 [0175.555] OpenServiceW (hSCManager=0x10e04e8, lpServiceName="Microsoft Exchange Compliance Service", dwDesiredAccess=0x20) returned 0x0 [0175.556] GetLastError () returned 0x424 [0175.556] _ultow (in: _Dest=0x424, _Radix=11467380 | out: _Dest=0x424) returned="1060" [0175.556] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0175.558] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xaefa50, nSize=0x2, Arguments=0xaefa68 | out: lpBuffer="拈Ď敖®蕗Ġ\x01") returned 0x62 [0175.559] GetFileType (hFile=0x90) returned 0x2 [0175.559] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xaefa34 | out: lpMode=0xaefa34) returned 1 [0176.393] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10e62c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xaefa44, lpReserved=0x0 | out: lpBuffer=0x10e62c8*, lpNumberOfCharsWritten=0xaefa44*=0x62) returned 1 [0176.749] LocalFree (hMem=0x10e62c8) returned 0x0 [0176.749] LocalFree (hMem=0x0) returned 0x0 [0176.749] CloseServiceHandle (hSCObject=0x10e04e8) returned 1 [0176.749] LocalFree (hMem=0x0) returned 0x0 [0176.749] exit (_Code=1060) Thread: id = 128 os_tid = 0x12e4 Process: id = "6" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b51a000" os_pid = "0xec0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange DAG Management\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 9 os_tid = 0xec8 [0175.604] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.604] __set_app_type (_Type=0x1) [0175.604] __p__fmode () returned 0x776f3c14 [0175.604] __p__commode () returned 0x776f49ec [0175.604] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0176.223] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0176.224] SetThreadUILanguage (LangId=0x0) returned 0x850409 [0176.600] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.600] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.600] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.600] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.600] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.600] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.600] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.600] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.601] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.601] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.601] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.601] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.602] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xbf04e8 [0176.608] OpenServiceW (hSCManager=0xbf04e8, lpServiceName="Microsoft Exchange DAG Management", dwDesiredAccess=0x20) returned 0x0 [0176.608] GetLastError () returned 0x424 [0176.608] _ultow (in: _Dest=0x424, _Radix=7338964 | out: _Dest=0x424) returned="1060" [0176.608] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.612] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x6ffbb0, nSize=0x2, Arguments=0x6ffbc8 | out: lpBuffer="抐¿ﯰo蕗Ġ\x01") returned 0x62 [0176.613] GetFileType (hFile=0x90) returned 0x2 [0176.613] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x6ffb94 | out: lpMode=0x6ffb94) returned 1 [0176.866] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xbf6290*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x6ffba4, lpReserved=0x0 | out: lpBuffer=0xbf6290*, lpNumberOfCharsWritten=0x6ffba4*=0x62) returned 1 [0177.060] LocalFree (hMem=0xbf6290) returned 0x0 [0177.060] LocalFree (hMem=0x0) returned 0x0 [0177.060] CloseServiceHandle (hSCObject=0xbf04e8) returned 1 [0177.061] LocalFree (hMem=0x0) returned 0x0 [0177.061] exit (_Code=1060) Thread: id = 131 os_tid = 0x10e4 Process: id = "7" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b41d000" os_pid = "0xe14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Diagnostics\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 10 os_tid = 0xf34 [0175.756] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.756] __set_app_type (_Type=0x1) [0175.757] __p__fmode () returned 0x776f3c14 [0175.757] __p__commode () returned 0x776f49ec [0175.757] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.757] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.758] SetThreadUILanguage (LangId=0x0) returned 0x480409 [0176.467] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.468] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.468] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.468] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.468] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.468] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.468] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.468] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.469] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.469] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.469] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.469] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.470] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x7004e8 [0176.476] OpenServiceW (hSCManager=0x7004e8, lpServiceName="Microsoft Exchange Diagnostics", dwDesiredAccess=0x20) returned 0x0 [0176.476] GetLastError () returned 0x424 [0176.476] _ultow (in: _Dest=0x424, _Radix=7141756 | out: _Dest=0x424) returned="1060" [0176.477] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.478] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x6cf958, nSize=0x2, Arguments=0x6cf970 | out: lpBuffer="抨p輦l蕗Ġ\x01") returned 0x62 [0176.479] GetFileType (hFile=0x90) returned 0x2 [0176.479] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x6cf93c | out: lpMode=0x6cf93c) returned 1 [0176.754] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x7062a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x6cf94c, lpReserved=0x0 | out: lpBuffer=0x7062a8*, lpNumberOfCharsWritten=0x6cf94c*=0x62) returned 1 [0176.972] LocalFree (hMem=0x7062a8) returned 0x0 [0176.972] LocalFree (hMem=0x0) returned 0x0 [0176.972] CloseServiceHandle (hSCObject=0x7004e8) returned 1 [0176.973] LocalFree (hMem=0x0) returned 0x0 [0176.973] exit (_Code=1060) Thread: id = 135 os_tid = 0x117c Process: id = "8" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b420000" os_pid = "0xec4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange EdgeSync\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 11 os_tid = 0xf5c [0175.106] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.106] __set_app_type (_Type=0x1) [0175.106] __p__fmode () returned 0x776f3c14 [0175.106] __p__commode () returned 0x776f49ec [0175.106] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.107] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.107] SetThreadUILanguage (LangId=0x0) returned 0xca0409 [0175.560] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0175.560] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0175.561] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0175.561] _wcsicmp (_String1="stop", _String2="query") returned 2 [0175.561] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0175.561] _wcsicmp (_String1="stop", _String2="start") returned 14 [0175.561] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0175.561] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0175.561] _wcsicmp (_String1="stop", _String2="control") returned 16 [0175.561] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0175.561] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0175.562] ResolveDelayLoadedAPI () returned 0x7770c440 [0175.562] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x10304e8 [0175.568] OpenServiceW (hSCManager=0x10304e8, lpServiceName="Microsoft Exchange EdgeSync", dwDesiredAccess=0x20) returned 0x0 [0175.568] GetLastError () returned 0x424 [0175.568] _ultow (in: _Dest=0x424, _Radix=11664584 | out: _Dest=0x424) returned="1060" [0175.569] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0175.570] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xb1fca4, nSize=0x2, Arguments=0xb1fcbc | out: lpBuffer="抨ăﳤ±蕗Ġ\x01") returned 0x62 [0175.571] GetFileType (hFile=0x90) returned 0x2 [0175.571] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb1fc88 | out: lpMode=0xb1fc88) returned 1 [0176.394] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10362a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xb1fc98, lpReserved=0x0 | out: lpBuffer=0x10362a8*, lpNumberOfCharsWritten=0xb1fc98*=0x62) returned 1 [0176.751] LocalFree (hMem=0x10362a8) returned 0x0 [0176.751] LocalFree (hMem=0x0) returned 0x0 [0176.751] CloseServiceHandle (hSCObject=0x10304e8) returned 1 [0176.751] LocalFree (hMem=0x0) returned 0x0 [0176.751] exit (_Code=1060) Thread: id = 129 os_tid = 0x1328 Process: id = "9" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b3a3000" os_pid = "0xf1c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Frontend Transport\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 12 os_tid = 0xf64 [0175.041] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.041] __set_app_type (_Type=0x1) [0175.041] __p__fmode () returned 0x776f3c14 [0175.041] __p__commode () returned 0x776f49ec [0175.041] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.041] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.042] SetThreadUILanguage (LangId=0x0) returned 0x840409 [0175.530] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0175.531] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0175.531] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0175.531] _wcsicmp (_String1="stop", _String2="query") returned 2 [0175.531] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0175.531] _wcsicmp (_String1="stop", _String2="start") returned 14 [0175.531] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0175.531] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0175.532] _wcsicmp (_String1="stop", _String2="control") returned 16 [0175.532] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0175.532] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0175.532] ResolveDelayLoadedAPI () returned 0x7770c440 [0175.534] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xa004e8 [0175.541] OpenServiceW (hSCManager=0xa004e8, lpServiceName="Microsoft Exchange Frontend Transport", dwDesiredAccess=0x20) returned 0x0 [0175.542] GetLastError () returned 0x424 [0175.542] _ultow (in: _Dest=0x424, _Radix=7534108 | out: _Dest=0x424) returned="1060" [0175.542] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0175.544] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x72f5f8, nSize=0x2, Arguments=0x72f610 | out: lpBuffer="拈 r蕗Ġ\x01") returned 0x62 [0175.545] GetFileType (hFile=0x90) returned 0x2 [0175.545] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x72f5dc | out: lpMode=0x72f5dc) returned 1 [0176.393] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xa062c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x72f5ec, lpReserved=0x0 | out: lpBuffer=0xa062c8*, lpNumberOfCharsWritten=0x72f5ec*=0x62) returned 1 [0176.746] LocalFree (hMem=0xa062c8) returned 0x0 [0176.746] LocalFree (hMem=0x0) returned 0x0 [0176.746] CloseServiceHandle (hSCObject=0xa004e8) returned 1 [0176.747] LocalFree (hMem=0x0) returned 0x0 [0176.747] exit (_Code=1060) Thread: id = 127 os_tid = 0x113c Process: id = "10" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b5a6000" os_pid = "0xdac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Health Manager\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 13 os_tid = 0xf78 [0175.946] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.946] __set_app_type (_Type=0x1) [0175.946] __p__fmode () returned 0x776f3c14 [0175.946] __p__commode () returned 0x776f49ec [0175.946] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.947] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.947] SetThreadUILanguage (LangId=0x0) returned 0x470409 [0176.557] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.557] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.557] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.557] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.557] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.557] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.557] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.557] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.558] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.558] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.558] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.558] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.558] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x6004e8 [0176.564] OpenServiceW (hSCManager=0x6004e8, lpServiceName="Microsoft Exchange Health Manager", dwDesiredAccess=0x20) returned 0x0 [0176.565] GetLastError () returned 0x424 [0176.565] _ultow (in: _Dest=0x424, _Radix=3995576 | out: _Dest=0x424) returned="1060" [0176.565] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.566] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x3cf794, nSize=0x2, Arguments=0x3cf7ac | out: lpBuffer="拀`<蕗Ġ\x01") returned 0x62 [0176.566] GetFileType (hFile=0x90) returned 0x2 [0176.566] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x3cf778 | out: lpMode=0x3cf778) returned 1 [0176.808] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x6062c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x3cf788, lpReserved=0x0 | out: lpBuffer=0x6062c0*, lpNumberOfCharsWritten=0x3cf788*=0x62) returned 1 [0176.991] LocalFree (hMem=0x6062c0) returned 0x0 [0176.991] LocalFree (hMem=0x0) returned 0x0 [0176.991] CloseServiceHandle (hSCObject=0x6004e8) returned 1 [0176.992] LocalFree (hMem=0x0) returned 0x0 [0176.992] exit (_Code=1060) Thread: id = 140 os_tid = 0x4b4 Process: id = "11" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b429000" os_pid = "0xfd0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Health Manager Recovery\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 14 os_tid = 0x510 [0169.639] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0169.639] __set_app_type (_Type=0x1) [0169.639] __p__fmode () returned 0x776f3c14 [0169.639] __p__commode () returned 0x776f49ec [0169.640] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0169.640] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0169.640] SetThreadUILanguage (LangId=0x0) returned 0x7e0409 [0170.746] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0170.746] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0170.746] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0170.746] _wcsicmp (_String1="stop", _String2="query") returned 2 [0170.746] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0170.746] _wcsicmp (_String1="stop", _String2="start") returned 14 [0170.746] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0170.746] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0170.747] _wcsicmp (_String1="stop", _String2="control") returned 16 [0170.747] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0170.747] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0170.747] ResolveDelayLoadedAPI () returned 0x7770c440 [0170.747] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xb004e8 [0170.754] OpenServiceW (hSCManager=0xb004e8, lpServiceName="Microsoft Exchange Health Manager Recovery", dwDesiredAccess=0x20) returned 0x0 [0170.754] GetLastError () returned 0x424 [0170.754] _ultow (in: _Dest=0x424, _Radix=9107544 | out: _Dest=0x424) returned="1060" [0170.755] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0171.432] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x8af834, nSize=0x2, Arguments=0x8af84c | out: lpBuffer="拘°\x8a蕗Ġ\x01") returned 0x62 [0171.824] GetFileType (hFile=0x90) returned 0x2 [0171.824] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x8af818 | out: lpMode=0x8af818) returned 1 [0172.622] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xb062d8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x8af828, lpReserved=0x0 | out: lpBuffer=0xb062d8*, lpNumberOfCharsWritten=0x8af828*=0x62) returned 1 [0173.741] LocalFree (hMem=0xb062d8) returned 0x0 [0173.741] LocalFree (hMem=0x0) returned 0x0 [0173.742] CloseServiceHandle (hSCObject=0xb004e8) returned 1 [0173.742] LocalFree (hMem=0x0) returned 0x0 [0173.742] exit (_Code=1060) Thread: id = 92 os_tid = 0x1354 Process: id = "12" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1b30c000" os_pid = "0xa28" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xe54" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 15 os_tid = 0xd8c Thread: id = 28 os_tid = 0x1368 Thread: id = 63 os_tid = 0x564 Thread: id = 87 os_tid = 0x2c0 Thread: id = 91 os_tid = 0x388 Process: id = "13" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1b363000" os_pid = "0xac8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x5b8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 16 os_tid = 0x5f0 Thread: id = 51 os_tid = 0x10b0 Thread: id = 76 os_tid = 0xa6c Thread: id = 110 os_tid = 0xf4 Thread: id = 116 os_tid = 0x1080 Process: id = "14" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1b22a000" os_pid = "0xed8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x648" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 17 os_tid = 0xf20 Thread: id = 29 os_tid = 0x864 Thread: id = 52 os_tid = 0x109c Thread: id = 89 os_tid = 0x1374 Thread: id = 93 os_tid = 0x1364 Process: id = "15" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1b39c000" os_pid = "0xfe4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x6e0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 18 os_tid = 0xf68 Thread: id = 30 os_tid = 0x11a4 Thread: id = 53 os_tid = 0x1230 Thread: id = 90 os_tid = 0x1198 Thread: id = 95 os_tid = 0x12b4 Process: id = "16" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x5c2c000" os_pid = "0x1014" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange IMAP4\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 19 os_tid = 0x1058 [0175.914] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.914] __set_app_type (_Type=0x1) [0175.914] __p__fmode () returned 0x776f3c14 [0175.914] __p__commode () returned 0x776f49ec [0175.914] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.914] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.915] SetThreadUILanguage (LangId=0x0) returned 0xee0409 [0176.648] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.648] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.648] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.648] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.648] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.648] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.648] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.648] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.648] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.648] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.648] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.649] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.649] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x10604e8 [0176.679] OpenServiceW (hSCManager=0x10604e8, lpServiceName="Microsoft Exchange IMAP4", dwDesiredAccess=0x20) returned 0x0 [0176.680] GetLastError () returned 0x424 [0176.680] _ultow (in: _Dest=0x424, _Radix=13892108 | out: _Dest=0x424) returned="1060" [0176.680] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.681] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xd3f9e8, nSize=0x2, Arguments=0xd3fa00 | out: lpBuffer="抨Ć﨨Ó蕗Ġ\x01") returned 0x62 [0176.682] GetFileType (hFile=0x90) returned 0x2 [0176.682] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xd3f9cc | out: lpMode=0xd3f9cc) returned 1 [0176.881] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10662a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xd3f9dc, lpReserved=0x0 | out: lpBuffer=0x10662a8*, lpNumberOfCharsWritten=0xd3f9dc*=0x62) returned 1 [0177.070] LocalFree (hMem=0x10662a8) returned 0x0 [0177.070] LocalFree (hMem=0x0) returned 0x0 [0177.070] CloseServiceHandle (hSCObject=0x10604e8) returned 1 [0177.070] LocalFree (hMem=0x0) returned 0x0 [0177.070] exit (_Code=1060) Thread: id = 139 os_tid = 0x114c Process: id = "17" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1b0af000" os_pid = "0x1070" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange IMAP4 Backend\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 20 os_tid = 0x1084 [0175.792] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.794] __set_app_type (_Type=0x1) [0175.794] __p__fmode () returned 0x776f3c14 [0175.794] __p__commode () returned 0x776f49ec [0175.794] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.795] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.796] SetThreadUILanguage (LangId=0x0) returned 0xcc0409 [0176.480] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.480] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.481] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.481] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.481] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.481] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.481] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.481] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.481] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.481] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.481] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.482] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.482] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xe504e8 [0176.488] OpenServiceW (hSCManager=0xe504e8, lpServiceName="Microsoft Exchange IMAP4 Backend", dwDesiredAccess=0x20) returned 0x0 [0176.488] GetLastError () returned 0x424 [0176.489] _ultow (in: _Dest=0x424, _Radix=14941664 | out: _Dest=0x424) returned="1060" [0176.489] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.490] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xe3fdbc, nSize=0x2, Arguments=0xe3fdd4 | out: lpBuffer="拀å﷼ã蕗Ġ\x01") returned 0x62 [0176.491] GetFileType (hFile=0x90) returned 0x2 [0176.491] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xe3fda0 | out: lpMode=0xe3fda0) returned 1 [0176.754] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xe562c0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xe3fdb0, lpReserved=0x0 | out: lpBuffer=0xe562c0*, lpNumberOfCharsWritten=0xe3fdb0*=0x62) returned 1 [0176.975] LocalFree (hMem=0xe562c0) returned 0x0 [0176.975] LocalFree (hMem=0x0) returned 0x0 [0176.975] CloseServiceHandle (hSCObject=0xe504e8) returned 1 [0176.975] LocalFree (hMem=0x0) returned 0x0 [0176.975] exit (_Code=1060) Thread: id = 136 os_tid = 0x1174 Process: id = "18" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1ae10000" os_pid = "0xd5c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xec0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 21 os_tid = 0x10c8 Thread: id = 31 os_tid = 0x1128 Thread: id = 60 os_tid = 0xdd0 Thread: id = 97 os_tid = 0x84 Thread: id = 100 os_tid = 0x168 Process: id = "19" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x292c000" os_pid = "0x10cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xe14" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 22 os_tid = 0x10c0 Thread: id = 38 os_tid = 0x7f0 Thread: id = 70 os_tid = 0x112c Thread: id = 102 os_tid = 0xf44 Thread: id = 107 os_tid = 0xd7c Process: id = "20" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2a2a000" os_pid = "0xfb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0xec4" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 23 os_tid = 0x11a0 Thread: id = 39 os_tid = 0x11a8 Thread: id = 61 os_tid = 0xb50 Thread: id = 99 os_tid = 0x428 Thread: id = 101 os_tid = 0xf2c Process: id = "21" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1ad44000" os_pid = "0xfa8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0xf1c" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 24 os_tid = 0xfa4 Thread: id = 32 os_tid = 0xf94 Thread: id = 54 os_tid = 0xabc Thread: id = 94 os_tid = 0x5a8 Thread: id = 98 os_tid = 0xbdc Process: id = "22" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1acc3000" os_pid = "0xd54" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0xdac" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0xf9c Thread: id = 33 os_tid = 0xf8c Thread: id = 62 os_tid = 0x868 Thread: id = 84 os_tid = 0x1384 Thread: id = 88 os_tid = 0x1378 Process: id = "23" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1aca6000" os_pid = "0x1134" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xfd0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x12ec Thread: id = 34 os_tid = 0xfc8 Thread: id = 45 os_tid = 0x12dc Thread: id = 82 os_tid = 0x1388 Thread: id = 83 os_tid = 0x13a8 Process: id = "24" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x79f32000" os_pid = "0x12f0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Information Store\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0x12cc [0175.529] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0176.165] __set_app_type (_Type=0x1) [0176.165] __p__fmode () returned 0x776f3c14 [0176.165] __p__commode () returned 0x776f49ec [0176.165] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0176.166] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0176.167] SetThreadUILanguage (LangId=0x0) returned 0x910409 [0176.583] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.583] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.583] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.584] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.584] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.584] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.584] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.584] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.584] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.584] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.584] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.584] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.585] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xb904e8 [0176.590] OpenServiceW (hSCManager=0xb904e8, lpServiceName="Microsoft Exchange Information Store", dwDesiredAccess=0x20) returned 0x0 [0176.591] GetLastError () returned 0x424 [0176.591] _ultow (in: _Dest=0x424, _Radix=10745796 | out: _Dest=0x424) returned="1060" [0176.591] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.592] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xa3f7a0, nSize=0x2, Arguments=0xa3f7b8 | out: lpBuffer="折¹£蕗Ġ\x01") returned 0x62 [0176.593] GetFileType (hFile=0x90) returned 0x2 [0176.593] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xa3f784 | out: lpMode=0xa3f784) returned 1 [0176.863] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xb96298*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xa3f794, lpReserved=0x0 | out: lpBuffer=0xb96298*, lpNumberOfCharsWritten=0xa3f794*=0x62) returned 1 [0177.047] LocalFree (hMem=0xb96298) returned 0x0 [0177.048] LocalFree (hMem=0x0) returned 0x0 [0177.048] CloseServiceHandle (hSCObject=0xb904e8) returned 1 [0177.048] LocalFree (hMem=0x0) returned 0x0 [0177.048] exit (_Code=1060) Thread: id = 130 os_tid = 0x10fc Process: id = "25" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1aa51000" os_pid = "0xfdc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x1014" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 35 os_tid = 0xff0 Thread: id = 40 os_tid = 0xd14 Thread: id = 71 os_tid = 0x1380 Thread: id = 105 os_tid = 0xfbc Thread: id = 113 os_tid = 0x1010 Process: id = "26" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1c0b5000" os_pid = "0x764" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Mailbox Assistants\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 36 os_tid = 0x4fc [0176.013] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0176.013] __set_app_type (_Type=0x1) [0176.013] __p__fmode () returned 0x776f3c14 [0176.013] __p__commode () returned 0x776f49ec [0176.014] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0176.014] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0176.014] SetThreadUILanguage (LangId=0x0) returned 0x850409 [0176.693] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.693] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.693] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.693] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.693] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.693] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.693] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.693] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.694] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.694] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.694] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.694] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.694] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xbe04e8 [0176.700] OpenServiceW (hSCManager=0xbe04e8, lpServiceName="Microsoft Exchange Mailbox Assistants", dwDesiredAccess=0x20) returned 0x0 [0176.700] GetLastError () returned 0x424 [0176.700] _ultow (in: _Dest=0x424, _Radix=7863180 | out: _Dest=0x424) returned="1060" [0176.700] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.702] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x77fb68, nSize=0x2, Arguments=0x77fb80 | out: lpBuffer="拈¾ﮨw蕗Ġ\x01") returned 0x62 [0176.702] GetFileType (hFile=0x90) returned 0x2 [0176.702] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x77fb4c | out: lpMode=0x77fb4c) returned 1 [0176.882] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xbe62c8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x77fb5c, lpReserved=0x0 | out: lpBuffer=0xbe62c8*, lpNumberOfCharsWritten=0x77fb5c*=0x62) returned 1 [0177.075] LocalFree (hMem=0xbe62c8) returned 0x0 [0177.075] LocalFree (hMem=0x0) returned 0x0 [0177.075] CloseServiceHandle (hSCObject=0xbe04e8) returned 1 [0177.076] LocalFree (hMem=0x0) returned 0x0 [0177.076] exit (_Code=1060) Thread: id = 142 os_tid = 0x1148 Process: id = "27" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1c0b8000" os_pid = "0x4e8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Mailbox Replication\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 37 os_tid = 0x380 [0175.831] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.831] __set_app_type (_Type=0x1) [0175.831] __p__fmode () returned 0x776f3c14 [0175.831] __p__commode () returned 0x776f49ec [0175.831] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.832] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.832] SetThreadUILanguage (LangId=0x0) returned 0x230409 [0176.492] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.492] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.492] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.492] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.492] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.492] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.492] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.493] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.493] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.493] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.493] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.493] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.494] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x6e04e8 [0176.499] OpenServiceW (hSCManager=0x6e04e8, lpServiceName="Microsoft Exchange Mailbox Replication", dwDesiredAccess=0x20) returned 0x0 [0176.500] GetLastError () returned 0x424 [0176.500] _ultow (in: _Dest=0x424, _Radix=1571952 | out: _Dest=0x424) returned="1060" [0176.500] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.502] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x17fc4c, nSize=0x2, Arguments=0x17fc64 | out: lpBuffer="拐nﲌ\x17蕗Ġ\x01") returned 0x62 [0176.503] GetFileType (hFile=0x90) returned 0x2 [0176.503] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x17fc30 | out: lpMode=0x17fc30) returned 1 [0176.755] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x6e62d0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x17fc40, lpReserved=0x0 | out: lpBuffer=0x6e62d0*, lpNumberOfCharsWritten=0x17fc40*=0x62) returned 1 [0176.977] LocalFree (hMem=0x6e62d0) returned 0x0 [0176.977] LocalFree (hMem=0x0) returned 0x0 [0176.977] CloseServiceHandle (hSCObject=0x6e04e8) returned 1 [0176.978] LocalFree (hMem=0x0) returned 0x0 [0176.978] exit (_Code=1060) Thread: id = 137 os_tid = 0x1188 Process: id = "28" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x431b000" os_pid = "0xd10" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "17" os_parent_pid = "0x1070" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0x1308 Thread: id = 46 os_tid = 0xa70 Thread: id = 64 os_tid = 0xa94 Thread: id = 104 os_tid = 0xea0 Thread: id = 112 os_tid = 0xebc Process: id = "29" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x18f3b000" os_pid = "0x1294" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange Mailbox Transport Delivery\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0x1304 [0175.638] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0176.228] __set_app_type (_Type=0x1) [0176.228] __p__fmode () returned 0x776f3c14 [0176.228] __p__commode () returned 0x776f49ec [0176.228] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0176.229] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0176.229] SetThreadUILanguage (LangId=0x0) returned 0x940409 [0176.616] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.616] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.616] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.616] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.616] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.616] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.616] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.616] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.616] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.616] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.616] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.616] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.617] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xb804e8 [0176.623] OpenServiceW (hSCManager=0xb804e8, lpServiceName="Microsoft Exchange Mailbox Transport Delivery", dwDesiredAccess=0x20) returned 0x0 [0176.624] GetLastError () returned 0x424 [0176.624] _ultow (in: _Dest=0x424, _Radix=8189656 | out: _Dest=0x424) returned="1060" [0176.624] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.626] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x7cf6b4, nSize=0x2, Arguments=0x7cf6cc | out: lpBuffer="抰¸|蕗Ġ\x01") returned 0x62 [0176.627] GetFileType (hFile=0x90) returned 0x2 [0176.627] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0x7cf698 | out: lpMode=0x7cf698) returned 1 [0176.866] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0xb862b0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0x7cf6a8, lpReserved=0x0 | out: lpBuffer=0xb862b0*, lpNumberOfCharsWritten=0x7cf6a8*=0x62) returned 1 [0177.064] LocalFree (hMem=0xb862b0) returned 0x0 [0177.064] LocalFree (hMem=0x0) returned 0x0 [0177.065] CloseServiceHandle (hSCObject=0xb804e8) returned 1 [0177.065] LocalFree (hMem=0x0) returned 0x0 [0177.065] exit (_Code=1060) Thread: id = 132 os_tid = 0x1154 Process: id = "30" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x17e3e000" os_pid = "0x1300" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange POP3\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 43 os_tid = 0x1298 [0175.668] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.682] __set_app_type (_Type=0x1) [0175.682] __p__fmode () returned 0x776f3c14 [0175.682] __p__commode () returned 0x776f49ec [0175.682] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.683] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.684] SetThreadUILanguage (LangId=0x0) returned 0xf70409 [0176.402] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.402] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.402] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.402] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.402] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.402] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.403] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.403] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.403] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.403] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.403] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.403] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.404] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x10d04e8 [0176.411] OpenServiceW (hSCManager=0x10d04e8, lpServiceName="Microsoft Exchange POP3", dwDesiredAccess=0x20) returned 0x0 [0176.411] GetLastError () returned 0x424 [0176.412] _ultow (in: _Dest=0x424, _Radix=14417096 | out: _Dest=0x424) returned="1060" [0176.412] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.413] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xdbfca4, nSize=0x2, Arguments=0xdbfcbc | out: lpBuffer="抠čﳤÛ蕗Ġ\x01") returned 0x62 [0176.414] GetFileType (hFile=0x90) returned 0x2 [0176.414] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xdbfc88 | out: lpMode=0xdbfc88) returned 1 [0176.753] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x10d62a0*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xdbfc98, lpReserved=0x0 | out: lpBuffer=0x10d62a0*, lpNumberOfCharsWritten=0xdbfc98*=0x62) returned 1 [0176.967] LocalFree (hMem=0x10d62a0) returned 0x0 [0176.967] LocalFree (hMem=0x0) returned 0x0 [0176.967] CloseServiceHandle (hSCObject=0x10d04e8) returned 1 [0176.967] LocalFree (hMem=0x0) returned 0x0 [0176.968] exit (_Code=1060) Thread: id = 133 os_tid = 0x1150 Process: id = "31" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x1a4c1000" os_pid = "0x1290" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"Microsoft Exchange POP3 Backend\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 44 os_tid = 0x12c0 [0176.543] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0176.543] __set_app_type (_Type=0x1) [0176.543] __p__fmode () returned 0x776f3c14 [0176.543] __p__commode () returned 0x776f49ec [0176.544] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0176.544] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0176.544] SetThreadUILanguage (LangId=0x0) returned 0xe30409 [0176.757] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.757] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.757] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.757] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.757] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.757] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.757] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.757] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.757] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.757] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.757] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.758] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.758] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x11004e8 [0176.764] OpenServiceW (hSCManager=0x11004e8, lpServiceName="Microsoft Exchange POP3 Backend", dwDesiredAccess=0x20) returned 0x0 [0176.764] GetLastError () returned 0x424 [0176.764] _ultow (in: _Dest=0x424, _Radix=13891956 | out: _Dest=0x424) returned="1060" [0176.764] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.766] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xd3f950, nSize=0x2, Arguments=0xd3f968 | out: lpBuffer="抨Đ戀Ó蕗Ġ\x01") returned 0x62 [0176.766] GetFileType (hFile=0x90) returned 0x2 [0176.767] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xd3f934 | out: lpMode=0xd3f934) returned 1 [0176.982] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x11062a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xd3f944, lpReserved=0x0 | out: lpBuffer=0x11062a8*, lpNumberOfCharsWritten=0xd3f944*=0x62) returned 1 [0177.137] LocalFree (hMem=0x11062a8) returned 0x0 [0177.137] LocalFree (hMem=0x0) returned 0x0 [0177.137] CloseServiceHandle (hSCObject=0x11004e8) returned 1 [0177.138] LocalFree (hMem=0x0) returned 0x0 [0177.138] exit (_Code=1060) Thread: id = 145 os_tid = 0x1190 Process: id = "32" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1a57d000" os_pid = "0x1338" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0x12f0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 47 os_tid = 0x10d8 Thread: id = 55 os_tid = 0xab0 Thread: id = 72 os_tid = 0x138c Thread: id = 109 os_tid = 0xdec Thread: id = 115 os_tid = 0x106c Process: id = "33" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1a298000" os_pid = "0xd70" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "26" os_parent_pid = "0x764" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 48 os_tid = 0xd28 Thread: id = 56 os_tid = 0x13d8 Thread: id = 77 os_tid = 0x1180 Thread: id = 106 os_tid = 0x4f4 Thread: id = 114 os_tid = 0x1024 Process: id = "34" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0x3b944000" os_pid = "0x10d4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"SQL Server Agent (TESTINSTANCE)\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0x12c4 [0175.716] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.720] __set_app_type (_Type=0x1) [0175.720] __p__fmode () returned 0x776f3c14 [0175.720] __p__commode () returned 0x776f49ec [0175.721] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.721] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.722] SetThreadUILanguage (LangId=0x0) returned 0xd60409 [0176.416] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.416] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.416] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.416] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.416] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.416] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.417] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.417] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.417] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.417] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.417] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.417] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.418] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x1304e8 [0176.463] OpenServiceW (hSCManager=0x1304e8, lpServiceName="SQL Server Agent (TESTINSTANCE)", dwDesiredAccess=0x20) returned 0x0 [0176.463] GetLastError () returned 0x424 [0176.464] _ultow (in: _Dest=0x424, _Radix=11991952 | out: _Dest=0x424) returned="1060" [0176.464] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.465] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xb6fb6c, nSize=0x2, Arguments=0xb6fb84 | out: lpBuffer="抨\x13ﮬ¶蕗Ġ\x01") returned 0x62 [0176.466] GetFileType (hFile=0x90) returned 0x2 [0176.466] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xb6fb50 | out: lpMode=0xb6fb50) returned 1 [0176.754] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x1362a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xb6fb60, lpReserved=0x0 | out: lpBuffer=0x1362a8*, lpNumberOfCharsWritten=0xb6fb60*=0x62) returned 1 [0176.970] LocalFree (hMem=0x1362a8) returned 0x0 [0176.970] LocalFree (hMem=0x0) returned 0x0 [0176.970] CloseServiceHandle (hSCObject=0x1304e8) returned 1 [0176.970] LocalFree (hMem=0x0) returned 0x0 [0176.970] exit (_Code=1060) Thread: id = 134 os_tid = 0x1170 Process: id = "35" image_name = "sc.exe" filename = "c:\\windows\\syswow64\\sc.exe" page_root = "0xc7c7000" os_pid = "0x1234" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x6d0" cmd_line = "sc stop \"SQL Server (TESTINSTANCE)\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 50 os_tid = 0x10dc [0175.978] GetModuleHandleA (lpModuleName=0x0) returned 0x1200000 [0175.978] __set_app_type (_Type=0x1) [0175.978] __p__fmode () returned 0x776f3c14 [0175.978] __p__commode () returned 0x776f49ec [0175.978] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1205f00) returned 0x0 [0175.978] __wgetmainargs (in: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030, _DoWildCard=0, _StartInfo=0x120e03c | out: _Argc=0x120e028, _Argv=0x120e02c, _Env=0x120e030) returned 0 [0175.979] SetThreadUILanguage (LangId=0x0) returned 0xc10409 [0176.683] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0176.683] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0176.684] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0176.684] _wcsicmp (_String1="stop", _String2="query") returned 2 [0176.684] _wcsicmp (_String1="stop", _String2="queryex") returned 2 [0176.684] _wcsicmp (_String1="stop", _String2="start") returned 14 [0176.684] _wcsicmp (_String1="stop", _String2="pause") returned 3 [0176.684] _wcsicmp (_String1="stop", _String2="interrogate") returned 10 [0176.684] _wcsicmp (_String1="stop", _String2="control") returned 16 [0176.684] _wcsicmp (_String1="stop", _String2="continue") returned 16 [0176.684] _wcsicmp (_String1="stop", _String2="stop") returned 0 [0176.684] ResolveDelayLoadedAPI () returned 0x7770c440 [0176.684] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x704e8 [0176.689] OpenServiceW (hSCManager=0x704e8, lpServiceName="SQL Server (TESTINSTANCE)", dwDesiredAccess=0x20) returned 0x0 [0176.690] GetLastError () returned 0x424 [0176.690] _ultow (in: _Dest=0x424, _Radix=15203680 | out: _Dest=0x424) returned="1060" [0176.690] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x424, dwLanguageId=0x0, lpBuffer=0x120e3c0, nSize=0x400, Arguments=0x0 | out: lpBuffer="The specified service does not exist as an installed service.\r\n") returned 0x3f [0176.691] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0xe7fd3c, nSize=0x2, Arguments=0xe7fd54 | out: lpBuffer="抨\x07ﵼç蕗Ġ\x01") returned 0x62 [0176.692] GetFileType (hFile=0x90) returned 0x2 [0176.692] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xe7fd20 | out: lpMode=0xe7fd20) returned 1 [0176.881] WriteConsoleW (in: hConsoleOutput=0x90, lpBuffer=0x762a8*, nNumberOfCharsToWrite=0x62, lpNumberOfCharsWritten=0xe7fd30, lpReserved=0x0 | out: lpBuffer=0x762a8*, lpNumberOfCharsWritten=0xe7fd30*=0x62) returned 1 [0177.072] LocalFree (hMem=0x762a8) returned 0x0 [0177.073] LocalFree (hMem=0x0) returned 0x0 [0177.073] CloseServiceHandle (hSCObject=0x704e8) returned 1 [0177.073] LocalFree (hMem=0x0) returned 0x0 [0177.073] exit (_Code=1060) Thread: id = 141 os_tid = 0x1184 Process: id = "36" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x17300000" os_pid = "0x13e8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "27" os_parent_pid = "0x4e8" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 57 os_tid = 0x13b4 Thread: id = 65 os_tid = 0xe08 Thread: id = 78 os_tid = 0x25c Thread: id = 103 os_tid = 0xf3c Thread: id = 108 os_tid = 0xdc8 Process: id = "37" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xcab1000" os_pid = "0x13b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "29" os_parent_pid = "0x1294" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 58 os_tid = 0x13ac Thread: id = 66 os_tid = 0xca4 Thread: id = 81 os_tid = 0x13a4 Thread: id = 118 os_tid = 0x116c Thread: id = 120 os_tid = 0xd08 Process: id = "38" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x47ff000" os_pid = "0xbd8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "30" os_parent_pid = "0x1300" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 59 os_tid = 0xc2c Thread: id = 67 os_tid = 0x13ec Thread: id = 80 os_tid = 0x1034 Thread: id = 111 os_tid = 0xe98 Thread: id = 117 os_tid = 0x1094 Process: id = "39" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x14153000" os_pid = "0x13f0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "34" os_parent_pid = "0x10d4" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 68 os_tid = 0xed0 Thread: id = 73 os_tid = 0x1394 Thread: id = 86 os_tid = 0xf6c Thread: id = 119 os_tid = 0xd1c Thread: id = 122 os_tid = 0xd18 Process: id = "40" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x1a795000" os_pid = "0xd68" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "31" os_parent_pid = "0x1290" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 69 os_tid = 0xb00 Thread: id = 75 os_tid = 0x13c4 Thread: id = 96 os_tid = 0x73c Thread: id = 124 os_tid = 0x1168 Thread: id = 125 os_tid = 0x12e8 Process: id = "41" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5412d000" os_pid = "0x1390" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "35" os_parent_pid = "0x1234" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 74 os_tid = 0x13fc Thread: id = 79 os_tid = 0xb68 Thread: id = 85 os_tid = 0x137c Thread: id = 121 os_tid = 0xddc Thread: id = 123 os_tid = 0xd20